Skip to content
GitLab
Projects Groups Snippets
  • /
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
    • Contribute to GitLab
  • Sign in / Register
  • O official-plugins
  • Project information
    • Project information
    • Activity
    • Labels
    • Members
  • Repository
    • Repository
    • Files
    • Commits
    • Branches
    • Tags
    • Contributors
    • Graph
    • Compare
  • Issues 23
    • Issues 23
    • List
    • Boards
    • Service Desk
    • Milestones
  • Merge requests 1
    • Merge requests 1
  • CI/CD
    • CI/CD
    • Pipelines
    • Jobs
    • Schedules
  • Deployments
    • Deployments
    • Environments
    • Releases
  • Monitor
    • Monitor
    • Incidents
  • Analytics
    • Analytics
    • Value stream
    • CI/CD
    • Repository
  • Wiki
    • Wiki
  • Snippets
    • Snippets
  • Activity
  • Graph
  • Create a new issue
  • Jobs
  • Commits
  • Issue Boards
Collapse sidebar
  • FramasoftFramasoft
  • PeerTubePeerTube
  • official-plugins
  • Issues
  • #32
Closed
Open
Issue created Mar 18, 2021 by Clément EDU-FAUCONNIERC@edu-fauconnierc

peertube-plugin-auth-ldap: unsupported protocol using node 12.x to connect to ldaps with TLS support < 1.2

Following the production guide on the develop branch, I was unable to connect to a secured ldap (using the auth ldap plugin) and had the following error in the logs :

{"level":"warn","message":"Cannot login ********* in LDAP plugin.","label":"peertube.sem:80 peertube-plugin-auth-ldap","err":
{"stack":"Error: 140182126659456:error:1425F102:SSL routines:ssl_choose_client_version:unsupported protocol:../deps/openssl/openssl/ssl/statem/statem_lib.c:1958:\n",
"message":"140182126659456:error:1425F102:SSL routines:ssl_choose_client_version:unsupported protocol:../deps/openssl/openssl/ssl/statem/statem_lib.c:1958:\n",
"library":"SSL routines","function":"ssl_choose_client_version",
"reason":"unsupported protocol","code":"ERR_SSL_UNSUPPORTED_PROTOCOL"},
"timestamp":"2021-03-16T16:16:25.431Z"}

After downgrading to node 10.x, everything worked. I guess Node 12 is forcing the use of TLS >= 1.2 ? I didn't manage to make it accept TLS 1.1 though...

Steps to reproduce

  1. Follow the prouction guide on the develop branch (to install Node 12 instead of Node 10)
  2. install peertube-plugin-auth-ldap
  3. configure the plugin to point to your ldaps (that supports TLS <1.2)
  4. try to log in Additional information

PeerTube instance:

  • version: 3.0.1
  • NodeJS version: 12.x
Edited Mar 18, 2021 by Clément EDU-FAUCONNIERC
Assignee
Assign to
Time tracking