node-ldapjs icon indicating copy to clipboard operation
node-ldapjs copied to clipboard

Published 20 hours ago • verified publisher icon ldapjs

STARTTLS support for the Server API

Open christiaangoossens opened this issue 4 years ago • 1 comments

Just an investigation into the possibilities of adding this: currently the server supports LDAP and LDAPS, through the default tls.createServer() method. It is however recommended to use STARTTLS instead of LDAPS, which is not actually an official protocol anymore, afaik.

It's not possible to implement a TLS upgrade in the exop handler as far as I know, could it be done in the lib itself? Would it be much work? The implementation in the client looks rather simple.

Hoping to hear from someone more knowledgeable on this code about this. Thank you!

For reference, it would use https://nodejs.org/api/tls.html#tls_new_tls_tlssocket_socket_options, new tls.TLSSocket, just not sure how to obtain a socket or to register the listeners here.

christiaangoossens avatar Oct 04 '20 16:10 christiaangoossens

You probably have more knowledge of this than anyone currently maintaining this library. We'd welcome your research into the matter, and a pull request if you are able.

jsumners avatar Oct 05 '20 12:10 jsumners

👋

On February 22, 2023, we released version 3 of this library. As a result, we are closing this issue/pull request.

Please see issue #839 for more information, including how to proceed if you feel this closure is in error.

jsumners avatar Feb 22 '23 19:02 jsumners