[AMOS commit] auth/cas: MDL-25062 CAS authentication plugin does not validate the CAS server certificate

[AMOS commit] auth/cas: MDL-25062 CAS authentication plugin does not validate the CAS server certificate

por AMOS bot -
Número de respuestas: 0
Author: Inaki
auth/cas: MDL-25062 CAS authentication plugin does not validate the CAS server certificate
The CAS protocol security model requires that you verify the cas server
certificate before you trust the answer (valid authentication and username
etc.).

Credit goes to Joachim Fritschi for reporting it and providing a patch.


http://git.moodle.org/gw?p=moodle.git;a=commit;h=c07fcc13839ff928b9df0dd48b8e710f1945e0b8
http://github.com/moodle/moodle/commit/c07fcc13839ff928b9df0dd48b8e710f1945e0b8

+ 1.9 en [auth_cas_certificate_check_key,core_auth]
+ 1.9 en [auth_cas_certificate_path_key,core_auth]
+ 1.9 en [auth_cas_proxycas,core_auth]
+ 1.9 en [auth_cas_logoutcas,core_auth]
+ 1.9 en [auth_cas_multiauth,core_auth]
+ 1.9 en [auth_cas_certificate_check,core_auth]
+ 1.9 en [auth_cas_certificate_path,core_auth]