A ref change was pushed to the OpenLDAP (openldap.git) repository.
It will be available in the public mirror shortly.
The branch, master has been updated
via a31a8ed20ea3e39ea00b3a284aa172a84cd09608 (commit)
from 210b156ece28a71cb625283fa5c30ee76d639cdc (commit)
Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.
- Log -----------------------------------------------------------------
commit a31a8ed20ea3e39ea00b3a284aa172a84cd09608
Author: Howard Chu <hyc(a)openldap.org>
Date: Fri Jul 29 13:05:45 2011 -0700
ITS#6999 fix syncrepl timeout in refreshAndPersist
-----------------------------------------------------------------------
Summary of changes:
servers/slapd/syncrepl.c | 5 ++++-
1 files changed, 4 insertions(+), 1 deletions(-)
---
http://www.openldap.org/devel/gitweb.cgi?p=openldap.git
A ref change was pushed to the OpenLDAP (openldap.git) repository.
It will be available in the public mirror shortly.
The branch, master has been updated
via 210b156ece28a71cb625283fa5c30ee76d639cdc (commit)
via fb4b4f7445d9392fbae097cc861e4cfb1694dcae (commit)
from ff7acea2d25b4037f93431909512aeedba33127c (commit)
Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.
- Log -----------------------------------------------------------------
commit 210b156ece28a71cb625283fa5c30ee76d639cdc
Author: Rich Megginson <rmeggins(a)redhat.com>
Date: Thu Jul 28 14:08:37 2011 -0700
ITS#7002 MozNSS: fix VerifyCert allow/try behavior
If the olcTLSVerifyClient is set to a value other than "never", the server
should request that the client send a client certificate for possible use
with client cert auth (e.g. SASL/EXTERNAL).
If set to "allow", if the client sends a cert, and there are problems with
it, the server will warn about problems, but will allow the SSL session to
proceed without a client cert.
If set to "try", if the client sends a cert, and there are problems with
it, the server will warn about those problems, and shutdown the SSL session.
If set to "demand" or "hard", the client must send a cert, and the server
will shutdown the SSL session if there are problems.
I added a new member of the tlsm context structure - tc_warn_only - if this
is set, tlsm_verify_cert will only warn about errors, and only if TRACE
level debug is set. This allows the server to warn but allow bad certs
if "allow" is set, and warn and fail if "try" is set.
commit fb4b4f7445d9392fbae097cc861e4cfb1694dcae
Author: Rich Megginson <rmeggins(a)redhat.com>
Date: Mon Jul 25 20:27:59 2011 -0600
ITS#7001 MozNSS: free the return of tlsm_find_and_verify_cert_key
If tlsm_find_and_verify_cert_key finds the cert and/or key, and it fails
to verify them, it will leave them allocated for the caller to dispose of.
There were a couple of places that were not disposing of the cert and key
upon error.
-----------------------------------------------------------------------
Summary of changes:
libraries/libldap/tls_m.c | 78 +++++++++++++++++++++++++++++++++++++-------
1 files changed, 65 insertions(+), 13 deletions(-)
---
http://www.openldap.org/devel/gitweb.cgi?p=openldap.git
A ref change was pushed to the OpenLDAP (openldap.git) repository.
It will be available in the public mirror shortly.
The branch, master has been updated
via ff7acea2d25b4037f93431909512aeedba33127c (commit)
from 890d4c6216e8a181923bb639aa7872bfebaf5fb3 (commit)
Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.
- Log -----------------------------------------------------------------
commit ff7acea2d25b4037f93431909512aeedba33127c
Author: Howard Chu <hyc(a)openldap.org>
Date: Thu Jul 28 13:52:47 2011 -0700
ITS#7000 fix bad patch in ITS#6472
-----------------------------------------------------------------------
Summary of changes:
servers/slapd/syncrepl.c | 2 +-
1 files changed, 1 insertions(+), 1 deletions(-)
---
http://www.openldap.org/devel/gitweb.cgi?p=openldap.git
A ref change was pushed to the OpenLDAP (openldap.git) repository.
It will be available in the public mirror shortly.
The branch, master has been updated
via 890d4c6216e8a181923bb639aa7872bfebaf5fb3 (commit)
from e8ac17e17c831ed44174a22c1cb2a8dc39fcb976 (commit)
Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.
- Log -----------------------------------------------------------------
commit 890d4c6216e8a181923bb639aa7872bfebaf5fb3
Author: Howard Chu <hyc(a)openldap.org>
Date: Thu Jul 28 13:48:08 2011 -0700
ITS#7003 fix typo
-----------------------------------------------------------------------
Summary of changes:
doc/guide/admin/slapdconfig.sdf | 2 +-
1 files changed, 1 insertions(+), 1 deletions(-)
---
http://www.openldap.org/devel/gitweb.cgi?p=openldap.git
A ref change was pushed to the OpenLDAP (openldap.git) repository.
It will be available in the public mirror shortly.
The branch, master has been updated
via e8ac17e17c831ed44174a22c1cb2a8dc39fcb976 (commit)
from 8eecc9a017584ea0b56b25f0e4750e3b16929de6 (commit)
Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.
- Log -----------------------------------------------------------------
commit e8ac17e17c831ed44174a22c1cb2a8dc39fcb976
Author: Jan Vcelak <jvcelak(a)redhat.com>
Date: Wed Jul 20 18:55:33 2011 +0200
ITS#6998 MozNSS: when cert not required, ignore issuer expiration
When server certificate is not required in a TLS session (e.g.
TLS_REQCERT is set to 'never'), ignore expired issuer certificate error
and do not terminate the connection.
-----------------------------------------------------------------------
Summary of changes:
libraries/libldap/tls_m.c | 1 +
1 files changed, 1 insertions(+), 0 deletions(-)
---
http://www.openldap.org/devel/gitweb.cgi?p=openldap.git
A ref change was pushed to the OpenLDAP (openldap.git) repository.
It will be available in the public mirror shortly.
The branch, master has been updated
via 8eecc9a017584ea0b56b25f0e4750e3b16929de6 (commit)
from db106f89e6026eca034aac74187c5d445ad43494 (commit)
Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.
- Log -----------------------------------------------------------------
commit 8eecc9a017584ea0b56b25f0e4750e3b16929de6
Author: Howard Chu <hyc(a)openldap.org>
Date: Mon Jul 18 12:53:23 2011 -0700
Only return requested attrs in sssvlv response
-----------------------------------------------------------------------
Summary of changes:
servers/slapd/overlays/sssvlv.c | 2 ++
1 files changed, 2 insertions(+), 0 deletions(-)
---
http://www.openldap.org/devel/gitweb.cgi?p=openldap.git
A ref change was pushed to the OpenLDAP (openldap.git) repository.
It will be available in the public mirror shortly.
The branch, master has been updated
via db106f89e6026eca034aac74187c5d445ad43494 (commit)
from c86677ef4146eb0f31d1077c00955c998388639f (commit)
Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.
- Log -----------------------------------------------------------------
commit db106f89e6026eca034aac74187c5d445ad43494
Author: Howard Chu <hyc(a)openldap.org>
Date: Mon Jul 18 12:41:51 2011 -0700
ITS#6985 fix sssvlv target offset, ordering match
-----------------------------------------------------------------------
Summary of changes:
servers/slapd/overlays/sssvlv.c | 8 +++++---
1 files changed, 5 insertions(+), 3 deletions(-)
---
http://www.openldap.org/devel/gitweb.cgi?p=openldap.git
A ref change was pushed to the OpenLDAP (openldap.git) repository.
It will be available in the public mirror shortly.
The branch, master has been updated
via c86677ef4146eb0f31d1077c00955c998388639f (commit)
from c0b669e14f4ef5b649f86bb3c1cc4ca76a00efa8 (commit)
Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.
- Log -----------------------------------------------------------------
commit c86677ef4146eb0f31d1077c00955c998388639f
Author: Pierangelo Masarati <ando(a)OpenLDAP.org>
Date: Fri Jul 8 08:47:28 2011 +0200
blind fix build on solaris native compilers (ITS#6992)
-----------------------------------------------------------------------
Summary of changes:
servers/slapd/ldapsync.c | 10 +++++-----
1 files changed, 5 insertions(+), 5 deletions(-)
---
http://www.openldap.org/devel/gitweb.cgi?p=openldap.git
A ref change was pushed to the OpenLDAP (openldap.git) repository.
It will be available in the public mirror shortly.
The branch, master has been updated
via c0b669e14f4ef5b649f86bb3c1cc4ca76a00efa8 (commit)
from c02e68112182db13f05adfe0dcca01b940f08b6a (commit)
Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.
- Log -----------------------------------------------------------------
commit c0b669e14f4ef5b649f86bb3c1cc4ca76a00efa8
Author: Pierangelo Masarati <ando(a)OpenLDAP.org>
Date: Thu Jul 7 08:14:14 2011 +0200
fix config emit (ITS#6986)
-----------------------------------------------------------------------
Summary of changes:
servers/slapd/overlays/constraint.c | 26 ++++++++++++++++++++++----
1 files changed, 22 insertions(+), 4 deletions(-)
---
http://www.openldap.org/devel/gitweb.cgi?p=openldap.git
A ref change was pushed to the OpenLDAP (openldap.git) repository.
It will be available in the public mirror shortly.
The branch, master has been updated
via c02e68112182db13f05adfe0dcca01b940f08b6a (commit)
from 8df4c357beed779db03056209853b17a022677a2 (commit)
Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.
- Log -----------------------------------------------------------------
commit c02e68112182db13f05adfe0dcca01b940f08b6a
Author: Howard Chu <hyc(a)openldap.org>
Date: Fri Jul 1 22:55:06 2011 -0700
ITS#6982 fix md5 memset invocation
-----------------------------------------------------------------------
Summary of changes:
libraries/liblutil/md5.c | 2 +-
1 files changed, 1 insertions(+), 1 deletions(-)
---
http://www.openldap.org/devel/gitweb.cgi?p=openldap.git