[AMOS commit] auth/cas: MDL-25062 CAS authentication plugin does not validate the CAS server certificate

[AMOS commit] auth/cas: MDL-25062 CAS authentication plugin does not validate the CAS server certificate

by AMOS bot -
Number of replies: 0
Author: Inaki
auth/cas: MDL-25062 CAS authentication plugin does not validate the CAS server certificate
The CAS protocol security model requires that you verify the cas server
certificate before you trust the answer (valid authentication and username
etc.).

Credit goes to Joachim Fritschi for reporting it and providing a patch.


http://git.moodle.org/gw?p=moodle.git;a=commit;h=d2bdcac8a917c132d1c86108943c2c9830f3b5f6
http://github.com/moodle/moodle/commit/d2bdcac8a917c132d1c86108943c2c9830f3b5f6

+ 1.8 en [auth_cas_certificate_check_key,core_auth]
+ 1.8 en [auth_cas_certificate_path_key,core_auth]
+ 1.8 en [auth_cas_proxycas,core_auth]
+ 1.8 en [auth_cas_logoutcas,core_auth]
+ 1.8 en [auth_cas_multiauth,core_auth]
+ 1.8 en [auth_cas_certificate_check,core_auth]
+ 1.8 en [auth_cas_certificate_path,core_auth]