A ref change was pushed to the OpenLDAP (openldap.git) repository. It will be available in the public mirror shortly.
The branch, master has been updated via 63926362a9c1f08b55307916581fbabe9e845d61 (commit) via 056bd0acf90337c3c599c84e352bf27b940373d2 (commit) via cfeb28412c28ce9feeea6e6c055286f201bd0a34 (commit) via 6f120920d359d3b880c5c56bde4c1b91c3bedb01 (commit) via a72d1ffe0fcb792e3e474402eec13d1ff936b969 (commit) via 622d13a32ec8d623c26a11b60b63e443dc86df99 (commit) from 4d02a43ec9a4be422d83094e8d39b7ef3bc290c5 (commit)
Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below.
- Log ----------------------------------------------------------------- commit 63926362a9c1f08b55307916581fbabe9e845d61 Author: Howard Chu hyc@openldap.org Date: Sat Sep 7 06:50:30 2013 -0700
ITS#7506 more doc updates
commit 056bd0acf90337c3c599c84e352bf27b940373d2 Author: Ben Jencks ben@bjencks.net Date: Sun Jan 27 18:42:17 2013 -0500
ITS#7506 DHParamFile: Update docs
Update docs to reflect changes in handling and fix some errors.
commit cfeb28412c28ce9feeea6e6c055286f201bd0a34 Author: Howard Chu hyc@openldap.org Date: Sat Sep 7 06:39:53 2013 -0700
ITS#7506 fix prev commit
The patch unconditionally enabled DHparams, which is a significant change of behavior. Reverting to previous behavior, which only enables DH use if a DHparam file was configured.
commit 6f120920d359d3b880c5c56bde4c1b91c3bedb01 Author: Ben Jencks ben@bjencks.net Date: Sun Jan 27 18:27:03 2013 -0500
ITS#7506 tls_o.c: Fix Diffie-Hellman parameter usage.
If a DHParamFile or olcDHParamFile is specified, then it will be used, otherwise a hardcoded 1024 bit parameter will be used. This allows the use of larger parameters; previously only 512 or 1024 bit parameters would ever be used.
commit a72d1ffe0fcb792e3e474402eec13d1ff936b969 Author: Howard Chu hyc@openldap.org Date: Sat Sep 7 06:31:58 2013 -0700
ITS#7506 cleanup prev commit
commit 622d13a32ec8d623c26a11b60b63e443dc86df99 Author: Ben Jencks ben@bjencks.net Date: Sun Jan 27 17:26:14 2013 -0500
ITS#7506 tls_g.c: Properly support DHParamFile.
If a DHParamFile or olcDHParamFile is specified then it will be loaded. This allows use of DHE/EDH cipher suites which was previously impossible with GnuTLS.
-----------------------------------------------------------------------
Summary of changes: doc/guide/admin/tls.sdf | 14 +++-- doc/man/man5/slapd-config.5 | 13 +++-- doc/man/man5/slapd.conf.5 | 15 +++-- libraries/libldap/tls_g.c | 26 +++++---- libraries/libldap/tls_o.c | 135 +++---------------------------------------- 5 files changed, 48 insertions(+), 155 deletions(-)