v1.1.0-beta.2
betaRefuses cleartext binds by default, fixes StartTLS, and adds the `ldap+starttls` protocol.
Security
- Backups over
ldap://are refused unlessinsecure=trueis set, since the bind DN and password are sent in cleartext. Useldaps://orldap+starttls://instead. - StartTLS connections verify the server certificate against the server’s hostname.
New
- The
ldap+starttlsprotocol connects over plain LDAP and upgrades the connection with StartTLS.
Fixes
- StartTLS connections no longer fail during the TLS handshake.
- The connection to the server is no longer closed before the backup has completed.
- A failed bind or handshake now ends the backup with an error instead of leaving it hanging.