Quanah Gibson-Mount pushed to branch master at openldap / OpenLDAP
Commits:
38f9dd2f by Ryan Tandy at 2020-04-14T10:04:33-07:00
ITS#7878 Replace uint32_t with unsigned in back-mdb
init.c: align mi_dbenv_flags and flags with mdb_dbi_open, which declares
flags as unsigned int.
search.c: align mi_rtxn_size with ARG_UINT; adjust ww_ctx.nentries to
silence a warning about signed/unsigned comparison.
config.c: parse checkpoint config more carefully. Reject negative or
unreasonably large values for kbytes and minutes. Ensure both values are
parsed successfully before making any changes.
Fixes a compilation failure under MinGW, where stdint.h types are not
implicitly pulled in by other headers.
- - - - -
4 changed files:
- servers/slapd/back-mdb/back-mdb.h
- servers/slapd/back-mdb/config.c
- servers/slapd/back-mdb/init.c
- servers/slapd/back-mdb/search.c
View it on GitLab: https://git.openldap.org/openldap/openldap/-/commit/38f9dd2fb87d5b851e54a6c…
--
View it on GitLab: https://git.openldap.org/openldap/openldap/-/commit/38f9dd2fb87d5b851e54a6c…
You're receiving this email because of your account on git.openldap.org.
Ryan Tandy pushed to branch master at openldap / OpenLDAP
Commits:
5c20342b by Peter Marschall at 2020-04-14T09:26:19-07:00
ITS#9203 contrib/passwd/argon2: add manual page
Add manual page slapd-pw-argon2.5 and make sure it gets installed.
Signed-off-by: Peter Marschall <peter(a)adpm.de>
- - - - -
2be4576a by Ryan Tandy at 2020-04-14T09:26:19-07:00
ITS#9203 slapd-argon2 -> pw-argon2
Based on initial patch by Peter Marschall.
- - - - -
40ce9a46 by Peter Marschall at 2020-04-14T09:26:19-07:00
ITS#9206 contrib/passwd/argon2: consolidate libsodium implementation
* use 'crypto_pwhash_str_alg(..., crypto_pwhash_ALG_ARGON2ID13)' to set
the algorithm to Argon2.
According to libsodium's documentation, the original 'crypto_pwhash_str()'
only guarantees a "memory-hard, CPU-intensive hash function", but not
necessarily Argon2. Although in released versions of libsodium Argon2 is
the only implemented backend, this may chane in the future.
* multiply the 'memory' parameter by 1024 to align it with the libargon2
implementation. The objective is to have consistent configuration in
OpenLDAP's pw-argon2 module no matter what backend implementation is used.
Signed-off-by: Peter Marschall <peter(a)adpm.de>
- - - - -
64856677 by Ryan Tandy at 2020-04-14T09:26:19-07:00
ITS#9206 Initialize libsodium before calling its functions
- - - - -
307b06ff by Ryan Tandy at 2020-04-14T09:26:19-07:00
ITS#9206 Convert libsodium default memlimit to KiB
- - - - -
0ec42b08 by Ryan Tandy at 2020-04-14T09:26:19-07:00
ITS#9206 Use argon2id default values explicitly
- - - - -
feb6f21d by Ryan Tandy at 2020-04-14T09:26:19-07:00
ITS#9203 Remove default values from slapd-pw-argon2.5
The defaults vary by crypto library and possibly even version, so it's
not worth trying to keep them accurate.
- - - - -
4 changed files:
- contrib/slapd-modules/passwd/argon2/Makefile
- contrib/slapd-modules/passwd/argon2/README
- contrib/slapd-modules/passwd/argon2/pw-argon2.c
- + contrib/slapd-modules/passwd/argon2/slapd-pw-argon2.5
View it on GitLab: https://git.openldap.org/openldap/openldap/-/compare/f6d9fdc4f1ed402083145f…
--
View it on GitLab: https://git.openldap.org/openldap/openldap/-/compare/f6d9fdc4f1ed402083145f…
You're receiving this email because of your account on git.openldap.org.
Quanah Gibson-Mount pushed to branch master at openldap / OpenLDAP
Commits:
e1876446 by Ryan Tandy at 2020-04-13T18:57:50+00:00
ITS#9212 Restore snprintf to caller-provided buffer
76df74dbeab47195e42946a474c3a5f8557c168d removed some snprintfs to
buffers that are actually returned to the client. Restore these.
- - - - -
bbe20cbf by Ryan Tandy at 2020-04-13T18:57:50+00:00
ITS#8731 cleanup unused logbuf
- - - - -
3 changed files:
- servers/slapd/back-meta/init.c
- servers/slapd/back-sql/add.c
- servers/slapd/schema_check.c
View it on GitLab: https://git.openldap.org/openldap/openldap/-/compare/e50741e459d4a524f06ec6…
--
View it on GitLab: https://git.openldap.org/openldap/openldap/-/compare/e50741e459d4a524f06ec6…
You're receiving this email because of your account on git.openldap.org.
Quanah Gibson-Mount pushed to branch OPENLDAP_REL_ENG_2_4 at openldap / OpenLDAP
Commits:
7cf7aa31 by Howard Chu at 2020-04-13T16:32:35+00:00
ITS#8650 loop on incomplete TLS handshake
Always retry ldap_int_tls_connect() if it didn't complete,
regardless of blocking or non-blocking socket. Code from
ITS#7428 was wrong to only retry for async.
- - - - -
7631dcea by Quanah Gibson-Mount at 2020-04-13T16:33:26+00:00
ITS#8650
- - - - -
2 changed files:
- CHANGES
- libraries/libldap/tls2.c
View it on GitLab: https://git.openldap.org/openldap/openldap/-/compare/c385351acb029d5bd3dceb…
--
View it on GitLab: https://git.openldap.org/openldap/openldap/-/compare/c385351acb029d5bd3dceb…
You're receiving this email because of your account on git.openldap.org.