enable TLS hostname validation#279

Merged

jch merged 39 commits intoruby-ldap:masterfrom

tmaher:tls-verify-hostnames

Aug 24, 2016

Commits on Aug 23, 2016

fix iptables blackholing for macOS
Tom Maher
committed
new fixture CA, now with private key
Tom Maher
committed
vagrant fix for macOS v Linux?
Tom Maher
committed
helper should use the new CA
Tom Maher
committed
rubocop fix
Tom Maher
committed
cherry pick from https://github.com/ruby-ldap/ruby-net-ldap/pull/259

JPvRiel-SB
authored and
Tom Maher
committed
check that the encryption hash is defined before using it
Tom Maher
committed
add tests for cert/hostname mismatch
Tom Maher
committed
stupid portforwarding tricks for local testing
Tom Maher
committed
omit example
Tom Maher
committed
doc tweak
Tom Maher
committed
too many markdown syntaxes
Tom Maher
committed
remove stale reference to gem
Tom Maher
committed
extra ldap object for multiple host tests
Tom Maher
committed
add multi-host SSL checks
Tom Maher
committed
include "localhost" as valid cert name
Tom Maher
committed
tidy up the TLS tests
Tom Maher
committed
fix up to look like https://github.com/ruby-ldap/ruby-net-ldap/pull/259#discussion-diff-57030107
Tom Maher
committed
remove useless test CA
Tom Maher
committed
only use tcp/9389 with vagrant, use the right exception for bad TLS connections
Tom Maher
committed
handle both exceptions
Tom Maher
committed
single vs multiple hosts throw different exceptions
Tom Maher
committed
more TLS tests around merging vs not merging the default options
Tom Maher
committed
fix bogus multi-host check
Tom Maher
committed
remove vagrant port override, because $INTEGRATION_PORT
Tom Maher
committed
more no-merge-default-opts tests, done properly
Tom Maher
committed
more docs about vagrant setup
Tom Maher
committed
add script to generate fixture
Tom Maher
committed
use script-generated fixture CA
Tom Maher
committed
describe where fixture CA comes from; also indent
Tom Maher
committed
linter quoting complaint
Tom Maher
committed

Commits on Aug 24, 2016

test that no tls_options means we get the system CA bundle
Tom Maher
committed
improve system store tests
Tom Maher
committed
use default tls opts for validation
Tom Maher
committed
properly add the fixture CA to CI system store
Tom Maher
committed
names matter
Tom Maher
committed
don't need the whole default hash for a verify?
Tom Maher
committed
add docs on how to actually validate an LDAP server cert
Tom Maher
committed
whoops, DEFAULT_PARAMS is already a hash
Tom Maher
committed