From 5539fea3bb0d272b4cefc2b72755cb3cd285cc67 Mon Sep 17 00:00:00 2001
From: Mark Felder <feld@feld.me>
Date: Sat, 14 Sep 2024 20:03:26 -0400
Subject: LDAP: permit overriding the CA root

---
 config/config.exs | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

(limited to 'config/config.exs')

diff --git a/config/config.exs b/config/config.exs
index 80a3b8d57..237928503 100644
--- a/config/config.exs
+++ b/config/config.exs
@@ -619,7 +619,9 @@ config :pleroma, :ldap,
   tls: System.get_env("LDAP_TLS") == "true",
   tlsopts: [],
   base: System.get_env("LDAP_BASE") || "dc=example,dc=com",
-  uid: System.get_env("LDAP_UID") || "cn"
+  uid: System.get_env("LDAP_UID") || "cn",
+  # defaults to CAStore's Mozilla roots
+  cacertfile: nil
 
 oauth_consumer_strategies =
   System.get_env("OAUTH_CONSUMER_STRATEGIES")
-- 
cgit v1.2.3