Does Fortify SSC support LDAPS connection ?

[allencharp]

Hi,

Currently we are using Fortify SSC 20.1 with AD, it works perfect

now we want to use LDAPS to ensure the security, I change the server URL from 

ldap://adserver:389

to

ldaps://adserver:636

 and it could not work

error log is:

2020-06-16 23:24:37,248 10.80.53.77 /ssc/api/v1/ldapServers/action/test [WARN] com.fortify.manager.BLL.impl.LdapServerBLLImpl - LDAP context validation time limit exceeded for DC=mycompany,DC=com; nested exception is org.springframework.ldap.CommunicationException
2020-06-16 23:24:37,248 10.80.53.77 /ssc/api/v1/ldapServers/action/test [WARN] com.fortify.manager.BLL.impl.core.LdapServerCoreBLLImpl - Ldap connection validation failed!
com.fortify.server.platform.shared.exceptions.ApiResourceValidationException: Resource of type LDAP configuration contained invalid data: Error connecting to LDAP.
	at com.fortify.manager.BLL.impl.LdapServerBLLImpl.validateConnection(LdapServerBLLImpl.java:106) ~[ssc-core-20.1.0.0169.jar:?]
	at com.fortify.manager.BLL.impl.LdapServerBLLImpl$$FastClassBySpringCGLIB$$206b7161.invoke(<generated>) ~[ssc-core-20.1.0.0169.jar:?]
	at org.springframework.cglib.proxy.MethodProxy.invoke(MethodProxy.java:218) ~[spring-core-5.1.13.RELEASE.jar:5.1.13.RELEASE]
	at org.springframework.aop.framework.CglibAopProxy$CglibMethodInvocation.invokeJoinpoint(CglibAopProxy.java:750) ~[spring-aop-5.1.13.RELEASE.jar:5.1.13.RELEASE]
	at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:163) ~[spring-aop-5.1.13.RELEASE.jar:5.1.13.RELEASE]
	at org.springframework.aop.aspectj.MethodInvocationProceedingJoinPoint.proceed(MethodInvocationProceedingJoinPoint.java:88) ~[spring-aop-5.1.13.RELEASE.jar:5.1.13.RELEASE]
	at com.fortify.manager.logging.ExceptionInterceptor.aroundBll(ExceptionInterceptor.java:69) ~[ssc-core-20.1.0.0169.jar:?]

[AnthonyHealy]

Hi @allencharp ,

To answer your question - Yes, SSC does support LDAPS connections.

If you have not already done so, I would suggest checking the configuration. Especially from the documentation details which can be found here - https://www.microfocus.com/documentation/fortify-software-security-center/2010/SSC_Help_20.1.0/index.htm#SSC_UG/Config_LDAP_Server.htm?

Most likely some small detail needs correction from looking at your connection error shown above. Please try to check names and ports again.

SSC section -- https://www.microfocus.com/documentation/fortify-software-security-center/