UnboundID waxay LDAPS ku ridi kartaa tunnel HTTP CONNECT

Isticmaal HTTPProxySocketFactory oo la socda warshadda socket TLS oo tixgeli la'aanta taageerada tooska ah ee xaqiijinta proxy.

UnboundID LDAP SDK 7.0.5 waxay bixisaa HTTPProxySocketFactory oo loogu talagalay dariiqa HTTP CONNECT. Marka meesha la aadayo ay tahay LDAPS, bixi warshadda socket TLS ee barnaamijka:

var proxyFactory =
    new com.unboundid.util.HTTPProxySocketFactory(
        "proxy.example.net", 8080, 10000, ldapsTlsFactory);

ldapsTlsFactory waa SSLSocketFactory-ka barnaamijka oo leh habaynta kalsoonida serverka ee loogu talagalay. U gudbi proxyFactory dhismaha LDAPConnection ee aqbala warshadda socket iyo magaca host iyo dekedda dhabta ah ee serverka LDAP.

Sidoo kale habee xaqiijinta magaca host ee isku xirka. SDK waxay soo bandhigtaa HostNameSSLSocketVerifier iyada oo loo marayo LDAPConnectionOptions; in kaliya la aammino soo saaraha shahaadada maaha isla hubinta la mid ah la midaynta hostka LDAP ee loogu talagalay.

Proxy-ga HTTP waa inuu oggolaado CONNECT ilaa meeshaas, inta badan dekedda 636 ee LDAPS. Proxy ku xaddidan dekedaha meelaha webka ayaa diidi kara.

Xaddidaadaha diiwaangashan ee warshadda ayaa muhiim ah: isgaarsiinta proxy-ga laftiisa laguma shifayn TLS, oo ma bixiso taageero toos ah xaqiijinta proxy HTTP. Bixinta warshadda TLS LDAPS waxay ilaalisaa isku xirka buug-gacmeedka xiga, halkii lagu dari lahaa hab gelitaan proxy oo maqan.

Maqaallo la xiriira