From 068df6f2b122bdd528ca92bf57cac7fa71fdf89a Mon Sep 17 00:00:00 2001
From: Will Rigby <wrigby@gmail.com>
Date: Thu, 16 Apr 2015 00:48:04 -0400
Subject: [PATCH] Support specifying path(s) to CA certificate(s)

Wires the 'ca_certificates' configuration option
through to tls.connect's 'ca' option.
---
 packages/xo-server-auth-ldap/src/index.js | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/packages/xo-server-auth-ldap/src/index.js b/packages/xo-server-auth-ldap/src/index.js
index 9c713e92c..5835152de 100644
--- a/packages/xo-server-auth-ldap/src/index.js
+++ b/packages/xo-server-auth-ldap/src/index.js
@@ -42,6 +42,10 @@ class AuthLdap {
       clientOpts.tlsOptions.rejectUnauthorized = conf.check_certificate
     }
 
+    if (conf.ca_certificates !== undefined) {
+      clientOpts.tlsOptions.ca = conf.ca_certificates
+    }
+
     const {base: searchBase} = conf
     const searchFilter = conf.filter || '(uid={{name}})'