From a2a2ebba2376b5ee55dbfd1a97174c01500c41b5 Mon Sep 17 00:00:00 2001 From: =?utf8?q?Ond=C5=99ej=20Kuzn=C3=ADk?= Date: Fri, 11 Feb 2022 13:58:05 +0000 Subject: [PATCH] ITS#8753 Document LDAP_OPT_X_TLS_PEERKEY_HASH --- doc/man/man3/ldap_get_option.3 | 11 +++++++++++ 1 file changed, 11 insertions(+) diff --git a/doc/man/man3/ldap_get_option.3 b/doc/man/man3/ldap_get_option.3 index 5b558fbd5b..4f0f710972 100644 --- a/doc/man/man3/ldap_get_option.3 +++ b/doc/man/man3/ldap_get_option.3 @@ -880,6 +880,17 @@ must be .BR "char **" , and its contents need to be freed by the caller using .BR ldap_memfree (3). +.TP +.B LDAP_OPT_X_TLS_PEERKEY_HASH +Sets the (public) key that the application expects the peer to be using. +.B invalue +must be +.BR "const char *" +containing the base64 encoding of the expected peer's key or in the format +.B ":" +where as a TLS session is established, the library will hash the peer's key +with the provided hash algorithm and compare it with value provided and will +only allow the session to continue if they match. .SH ERRORS On success, the functions return .BR LDAP_OPT_SUCCESS , -- 2.47.3