Re: StartTLS

[Chris R. <chr...@me...>]

Fabio Spataro <sp...@pr...> wrote:
> I have found a problem using start_tls in my perl script.
> 
> With IO::Socket::SSL 0.80 and Net::LDAP 0.251 start_tls failes on 
> reconnect. This is a well-known problem.
> 
> With IO::Socket::SSL 0.81 and Net::LDAP 0.251 start_tls failes in any 
> case (in my experience). I have modified Net/LDAP.pm in this way:
> 
> $ diff perl-ldap-0.251.old/lib/Net/LDAP.pm perl-ldap-0.251/lib/Net/LDAP.pm
> 805c805,806
> <   (IO::Socket::SSL::socketToSSL($sock) and tie *{$sock},
> 'IO::Socket::SSL', $sock) ---
>>  #(IO::Socket::SSL::socketToSSL($sock) and tie *{$sock},
>>  'IO::Socket::SSL', $sock) (IO::Socket::SSL::socketToSSL($sock) and tie
>>   *{$sock}, 'SSL_HANDLE', $sock)
> 
> Now start_tls is ok (on reconnect too).
> 
> Fabio Spataro

There's already a fix for that in version 1.31 of LDAP.pm in CVS, but I'm
not sure if that's made it out into a release yet.

Cheers,

Chris