A ref change was pushed to the OpenLDAP (openldap.git) repository. It will be available in the public mirror shortly.
The branch, master has been updated via 4962dd6083ae0fe722eb23a618ad39e47611429b (commit) from ef607995685009f0654411daeb4c961c2e095a53 (commit)
Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below.
- Log ----------------------------------------------------------------- commit 4962dd6083ae0fe722eb23a618ad39e47611429b Author: Howard Guo hguo@suse.com Date: Thu Nov 10 15:39:03 2016 +0100
ITS#8529 Avoid hiding the error if user specified CA does not load
The TLS configuration deliberately hid the error in case that user specified CA locations cannot be read, by loading CAs from default locations; and when user does not specify CA locations, the CAs from default locations are not read at all.
This patch corrects the behaviour so that CAs from default location are used if user does not specify a CA location, and user is informed of the error if CAs cannot be loaded from the user specified location.
-----------------------------------------------------------------------
Summary of changes: libraries/libldap/tls_o.c | 12 +++++++++--- 1 file changed, 9 insertions(+), 3 deletions(-)