in src/Zyborg.PassCore.PasswordProvider.LDAP/LdapPasswordChangeProvider.cs [352:362]
private bool CustomServerCertValidation(
object sender,
X509Certificate certificate,
X509Chain chain,
SslPolicyErrors sslPolicyErrors) =>
_options.LdapIgnoreTlsErrors || sslPolicyErrors == SslPolicyErrors.None || chain.ChainStatus
.Any(x => x.Status switch
{
X509ChainStatusFlags.UntrustedRoot when _options.LdapIgnoreTlsValidation => true,
_ => x.Status == X509ChainStatusFlags.NoError
});