Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

How to Define Certificate Authority Path #188

Closed
dolphinscorp opened this issue Dec 27, 2023 · 2 comments
Closed

How to Define Certificate Authority Path #188

dolphinscorp opened this issue Dec 27, 2023 · 2 comments

Comments

@dolphinscorp
Copy link

Hi

How to define certificate authority path in homeserver.yaml for openssl LDAPS.

Please advice

@dolphinscorp
Copy link
Author

dolphinscorp commented Dec 28, 2023

disabling certification validation "validate_cert: false" works but its security risk.

Please suggest how to defince CA path in homeserver.yaml

@erikjohnston @reivilibre @H-Shay

@dolphinscorp
Copy link
Author

dolphinscorp commented Dec 29, 2023

I have resolve my LDAPS key verification issue by following workaround

place my CA certificate in /etc/ssl/certs in matrix-synapse VPS

then run following command

sudo c_rehash /etc/ssl/certs/ # to refresh symlink

Then verify my OS of matrix can make ssl connection with ldaps server

openssl s_client -connect mydomain.tech:636 (CA is placed in /etc/ssl/certs/myca.pem)

image

Now users can authenticate.

@richvdh richvdh closed this as completed Dec 29, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants