Files
scadaproj/infra/glauth/tls/cert.pem
T
Joseph Doherty 59bf74760c infra(glauth): enable LDAPS on :3894 alongside plain :3893 (#19, mxaccessgw#180)
Self-signed cert (SAN IP 10.100.0.35), public cert checked in, key host-only.
Deployed on 10.100.0.35: TLS chain verifies with the cert and fails without
it; raw LDAPS simple bind returns 0 for a good password and 49 for a bad one;
plain :3893 bind unchanged. README: thumbprint, client config, rotation; also
fixes the user-bind DN example (GLAuth puts users under their primary group OU).

Claude-Session: https://claude.ai/code/session_01GT67AEHd2Acv1YPwGfXEoV
2026-11-10 11:46:48 -05:00

27 lines
1.6 KiB
Plaintext

-----BEGIN CERTIFICATE-----
MIIEaTCCAtGgAwIBAgIUFqbnjiomQ8qwlkqc09zz/cz33b0wDQYJKoZIhvcNAQEL
BQAwGzEZMBcGA1UEAwwQemItc2hhcmVkLWdsYXV0aDAeFw0yNjExMTAxNjQ1NDJa
Fw0yOTExMDkxNjQ1NDJaMBsxGTAXBgNVBAMMEHpiLXNoYXJlZC1nbGF1dGgwggGi
MA0GCSqGSIb3DQEBAQUAA4IBjwAwggGKAoIBgQDQCmS7kpTIQQUQW9y4lMSOqNYc
t5stvdZf+LlYQYqKydcdgSxJLeA7rIYaC3jGrsFjn/o26BLp0/jQLh5HDjmEwYEF
mTqvVdy0ef1AscxJmeCeCAVp5Tm5m5icvN9fLgY/e/mx+G4GJLXGy+xLTffh+dq2
nwXq4p7pS8vKlr+y9DGMAIJOJrEp5xTN3l4rTMujdmbiYiC7ymtNpHKgXAJ/zMKY
A9woUqD57tAm8w0HpplgSHoLrNMg7uUtan8nJjm355AWqKm4j8wRK6yPXPxPvZuw
WAI5wPGH8kjfm1AYFrTuFLZFReX6bbMv2LhQFI9MwBYk6PjCwjyOTjcrK/5xLm86
ZUsJ0qCo7Uud/R1kOvOcBp5KBN8Gs31NZx4t6j7brtSQNsZfu9T7x5krUGKVWErr
q26mQbf4HN+KORaVNJcW4BI96do1K/uGBUzakilsRh5s3VjkMGqNOCGny0T/vaS5
Y29X8CwEW2973MH1HnOJr8fWmKfVwOvhv41MCbkCAwEAAaOBpDCBoTAdBgNVHQ4E
FgQUNdXIl0ILdlh3AKXwmJV/KujaaegwHwYDVR0jBBgwFoAUNdXIl0ILdlh3AKXw
mJV/KujaaegwDwYDVR0TAQH/BAUwAwEB/zAsBgNVHREEJTAjhwQKZAAjgglsb2Nh
bGhvc3SCEHpiLXNoYXJlZC1nbGF1dGgwCwYDVR0PBAQDAgWgMBMGA1UdJQQMMAoG
CCsGAQUFBwMBMA0GCSqGSIb3DQEBCwUAA4IBgQAcEVL2fTbwS6T+u/e99fMbgmOm
31CefVYjJjjwge1tE4lw56cGygUCQtp90SXHnEXuJbSfTGlWCaXDH4fl064kqcOq
WFctP2oxLK1yrrVWNOu0BCi+o2B8P51f5vZt6xMA3nWjs5vPi+ajQ2BBV5cA2o9D
4cmOTcVR1ZEb4mSvcO6IZlTP1vT6HL4Sha/rJlWScEUJWUj0g7Tvw97737Ryqh3R
XKWW2STTlaYpIBGZGD6TiOjDuLYqZ4nla92yakS9tHrZfQ3LCVdfpnyalEfadkWd
lUJ4zK9S0EnbVyy+Wx1i0WZ52gwty09JAaiuNVudyrjLK473wV6kroVO3IzlMkw9
Z/kfdjRBfWp8VzwDCgJAUi4T5sp9VsbeeBdzE8twrKZJq5+UgMXH2X42Q0S/9nd2
807L00UNOSs8erYgcbpp8Pcs/BPy3SBy6evfmMI7qHQv9/tM1uja74wyqrZgs0Ju
FH9zSFseoWjUpdVN54eO74+4XzHFPmWUr4E5mrM=
-----END CERTIFICATE-----