Commit cad04d07 authored by speedy01's avatar speedy01 Committed by akrherz

OF-926 Clients can't authenticate using LDAP SSL

Reverting some changes made with PR #239. by enabling the custom socket factory.  Added the use of Comparator per http://docs.oracle.com/javase/8/docs/technotes/guides/jndi/jndi-ldap.html#pooling
  for connection pooling
parent 3154b03a
...@@ -584,7 +584,7 @@ public class LdapManager { ...@@ -584,7 +584,7 @@ public class LdapManager {
get details of the negotiated TLS session: cipher suite, get details of the negotiated TLS session: cipher suite,
peer certificate, etc. */ peer certificate, etc. */
try { try {
SSLSession session = tls.negotiate(); SSLSession session = tls.negotiate(new org.jivesoftware.util.SimpleSSLSocketFactory());
context.setTlsResponse(tls); context.setTlsResponse(tls);
context.setSslSession(session); context.setSslSession(session);
...@@ -703,7 +703,7 @@ public class LdapManager { ...@@ -703,7 +703,7 @@ public class LdapManager {
get details of the negotiated TLS session: cipher suite, get details of the negotiated TLS session: cipher suite,
peer certificate, etc. */ peer certificate, etc. */
try { try {
SSLSession session = tls.negotiate(); SSLSession session = tls.negotiate(new org.jivesoftware.util.SimpleSSLSocketFactory());
ctx.setTlsResponse(tls); ctx.setTlsResponse(tls);
ctx.setSslSession(session); ctx.setSslSession(session);
...@@ -793,7 +793,7 @@ public class LdapManager { ...@@ -793,7 +793,7 @@ public class LdapManager {
get details of the negotiated TLS session: cipher suite, get details of the negotiated TLS session: cipher suite,
peer certificate, etc. */ peer certificate, etc. */
try { try {
SSLSession session = tls.negotiate(); SSLSession session = tls.negotiate(new org.jivesoftware.util.SimpleSSLSocketFactory());
ctx.setTlsResponse(tls); ctx.setTlsResponse(tls);
ctx.setSslSession(session); ctx.setSslSession(session);
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment