The mailing list for listmasters using Sympa

["stefano.antonelli@cnaf" <address@concealed>]

Dear All,

we have a Sympa 6.2.56, virtual domains, installation and authentication
via CAS/LDAP.

Apache ssl error log file shows an error message which do not invalidate
the authentication but I'd like to understand.

I paste the log message here; is it a question about ssl.conf
configuration, something like "SSLVerifyClient" and is this in ssl.conf
or sympa.conf (in /etc/httpd/conf.d/sympa.conf for Apache)?

thank you
regards
Stefano


###
[Fri Oct 02 12:25:19.803568 2020] [proxy_fcgi:error] [pid 31966] [client
***.***.***.***:64532] AH01071: Got error '[Fri Oct  2 12:25:19 2020]
wwsympa.fcgi:
*******************************************************************\n[Fri
Oct  2 12:25:19 2020] wwsympa.fcgi:  Using the default of
SSL_verify_mode of SSL_VERIFY_NONE for client\n[Fri Oct  2 12:25:19
2020] wwsympa.fcgi:  is deprecated! Please set SSL_verify_mode to
SSL_VERIFY_PEER\n[Fri Oct  2 12:25:19 2020] wwsympa.fcgi:  possibly with
SSL_ca_file|SSL_ca_path for verification.\n[Fri Oct  2 12:25:19 2020]
wwsympa.fcgi:  If you really don't want to verify the cert', referer:
https://my_idp_server.***.***/
[Fri Oct 02 12:25:19.843077 2020] [proxy_fcgi:error] [pid 31966] [client
***.***.***.***:64532] AH01071: Got error 'ificate and keep the\n[Fri
Oct  2 12:25:19 2020] wwsympa.fcgi:  connection open to
Man-In-The-Middle attacks please set\n[Fri Oct  2 12:25:19 2020]
wwsympa.fcgi:  SSL_verify_mode explicitly to SSL_VERIFY_NONE in your
application.\n[Fri Oct  2 12:25:19 2020] wwsympa.fcgi:
*******************************************************************\n[Fri
Oct  2 12:25:19 2020] wwsympa.fcgi:   at
/usr/share/perl5/vendor_perl/AuthCAS.pm line 728.\n', referer:
https://my_idp_server.***.***/
###