openldap-bugs July 2021

openldap-bugs@openldap.org

1 participants
263 discussions

[Issue 6248] Support multiple CA Cert directories
by openldap-its＠openldap.org 22 Jul '21

22 Jul '21

https://bugs.openldap.org/show_bug.cgi?id=6248 Howard Chu <hyc(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|UNCONFIRMED |RESOLVED Resolution|--- |TEST --- Comment #9 from Howard Chu <hyc(a)openldap.org> --- Added in master -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 6244] "now" dynacl module
by openldap-its＠openldap.org 22 Jul '21

22 Jul '21

https://bugs.openldap.org/show_bug.cgi?id=6244 --- Comment #7 from Michael Ströder <michael(a)stroeder.com> --- Thanks for working on this. This module is very useful! Any chance to see this in 2.5.6? It's still in contrib/ anyway, so downstream packagers and admins using this know that there's no official support for it. -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 6248] Support multiple CA Cert directories
by openldap-its＠openldap.org 22 Jul '21

22 Jul '21

https://bugs.openldap.org/show_bug.cgi?id=6248 --- Comment #8 from Howard Chu <hyc(a)openldap.org> --- Supporting this will require extra care on the part of the sysadmins. In particular, we currently send a list of the names of every CA cert that was configured, to every client, if client cert authentication is configured. It would probably be a bad idea to send the hundreds of CAs in the default cert bundle in that case. It only ever makes sense for an LDAP server to trust and advertise a very small number of CAs. In particular when client certs are used for authentication, it doesn't make sense to trust certs from anywhere other than the CA that's signing the client certs. Given the small scope of trust, it also doesn't make sense to be picking up trusted CA certs from large numbers of locations. -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 6244] "now" dynacl module
by openldap-its＠openldap.org 22 Jul '21

22 Jul '21

https://bugs.openldap.org/show_bug.cgi?id=6244 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |TEST Status|IN_PROGRESS |RESOLVED --- Comment #6 from Quanah Gibson-Mount <quanah(a)openldap.org> --- Commits: • 92a8025f by Quanah Gibson-Mount at 2021-07-22T17:12:58+00:00 ITS#6244 - Add "now" dynacl module -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 6248] Support multiple CA Cert directories
by openldap-its＠openldap.org 22 Jul '21

22 Jul '21

https://bugs.openldap.org/show_bug.cgi?id=6248 --- Comment #7 from Quanah Gibson-Mount <quanah(a)openldap.org> --- For GnuTLS, it is https://gnutls.org/manual/html_node/X509-certificate-API.html#index-gnutls_… -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 9157] return additional error code information when OPT_X_TLS_NEWCTX fails
by openldap-its＠openldap.org 22 Jul '21

22 Jul '21

https://bugs.openldap.org/show_bug.cgi?id=9157 --- Comment #4 from Quanah Gibson-Mount <quanah(a)openldap.org> --- Commits: • 2c0707cf by Howard Chu at 2021-07-22T15:27:31+01:00 ITS#9157 save TLS errmsg in ld->ld_error -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8775] PASSMOD exop fails with RWM and tight ACLs
by openldap-its＠openldap.org 22 Jul '21

22 Jul '21

https://bugs.openldap.org/show_bug.cgi?id=8775 --- Comment #2 from Quanah Gibson-Mount <quanah(a)openldap.org> --- Commits: • 81076a7f by Howard Chu at 2021-07-20T19:27:45+01:00 ITS#8775 for passwordMod, pass real DN thru -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 6916] slapo-unique returns operations error when assertion control is used
by openldap-its＠openldap.org 22 Jul '21

22 Jul '21

https://bugs.openldap.org/show_bug.cgi?id=6916 --- Comment #13 from Quanah Gibson-Mount <quanah(a)openldap.org> --- Commits: • 4bd6a6d4 by Howard Chu at 2021-07-20T17:54:26+01:00 ITS#6916 unique: internal ops shouldn't have user's controls -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 6248] Support multiple CA Cert directories
by openldap-its＠openldap.org 22 Jul '21

22 Jul '21

https://bugs.openldap.org/show_bug.cgi?id=6248 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |UNCONFIRMED Resolution|INVALID |--- --- Comment #6 from Quanah Gibson-Mount <quanah(a)openldap.org> --- Should be possible via https://www.openssl.org/docs/man1.1.1/man3/X509_LOOKUP_add_dir.html Some discussion on how to do this at https://curl.se/mail/lib-2012-07/0233.html and https://curl.se/mail/lib-2012-07/0284.html -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 5582] Default OpenSSL certs are only used when TLS_CACERT(DIR)
by openldap-its＠openldap.org 22 Jul '21

22 Jul '21

https://bugs.openldap.org/show_bug.cgi?id=5582 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|hyc(a)openldap.org |bugs(a)openldap.org -- You are receiving this mail because: You are on the CC list for the issue.

1 0

← Newer
1
...
10
11
12
13
14
15
16
...
27
Older →

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-bugs July 2021