Commit Graph

2009 Commits

Author SHA1 Message Date
Howard Chu
16fcba1e98 ITS#9541 fix typo in util-int.c
From 94fbd96826
2021-04-30 09:25:13 +01:00
Nadezhda Ivanova
db389d38ce ITS#9502 Implement LDAP_OPT_TCP_USER_TIMEOUT 2021-04-22 21:52:12 +00:00
Howard Chu
edfc4e7ffe ITS#9530 ldo_defbase now must be freed in ldap_ld_free() 2021-04-21 18:06:26 +01:00
Norm Green
87397b345b ITS#9530 fix double-free of LDAP_OPT_DEFBASE 2021-04-21 18:03:43 +01:00
Ondřej Kuzník
7df2a0f394 ITS#8847 Allocate a large enough buffer 2021-04-15 15:16:19 +01:00
Andreas Schulze
680091b5b4 ITS#8586 load cert+chain from TLSCertificateFile
For OpenSSL
2021-04-12 20:32:09 +01:00
Howard Chu
e0dcf4c4d7 ITS#9518 fix prev commit 2021-04-09 19:29:11 +01:00
Howard Chu
fe6a740381 ITS#9521 clarify - affects OpenSSL 1.1.1, not 1.1.0 2021-04-09 18:23:53 +01:00
Howard Chu
2a3b64f4e6 ITS#9518 add LDAP_OPT_X_TLS_PROTOCOL_MAX option
OpenSSL only
2021-04-09 18:12:40 +01:00
Howard Chu
b72bce2400 ITS#9521 Set TLSv1.3 cipher suites for OpenSSL 1.1 2021-04-09 15:59:22 +01:00
Howard Chu
94fbd96826 ITS#9513 Change all lutil time structs to use nanoseconds
Instead of microseconds
2021-03-31 18:53:50 +00:00
Ondřej Kuzník
3bd1b0909a ITS#9001 Use a TAvl for request tracking in libldap 2021-03-30 15:46:40 +01:00
Ondřej Kuzník
e36d1e31c5 ITS#9001 manual changes 2021-03-30 15:46:40 +01:00
Quanah Gibson-Mount
38d1ac0449 ITS#5365 - Add support for symbol versioning libldap and lilber 2021-03-29 18:11:00 +00:00
Howard Chu
bc0d62db23 Revert "ITS#8847 more fallout from ldap_pvt_sockaddrstr move"
This reverts commit f2ddf89e3c.

Move Sockaddr def to ac/socket.h instead.
2021-03-27 10:38:59 +00:00
Howard Chu
f2ddf89e3c ITS#8847 more fallout from ldap_pvt_sockaddrstr move 2021-03-26 14:12:47 +00:00
Howard Chu
829263c454 ITS#8847 move lutil_sockaddrstr() to ldap_pvt_sockaddrstr() 2021-03-26 13:45:26 +00:00
HoweverAT
9d594a118e ITS#8847 Add SOCKET_BIND_ADDRESSES Option 2021-03-25 18:47:11 +00:00
HoweverAT
8ebd065048 ITS#8847 Print local address in connection dump 2021-03-25 17:37:26 +00:00
Howard Chu
bb6844e296 ITS#7295 don't init TLS threads by default
Do it explicitly in servers
2021-03-21 15:26:57 +00:00
Hugh McMaster
baee6c47e7 ITS#8996 - Generate and install a pkg-config file for the libldap library 2021-03-15 21:39:55 +00:00
Tero Saarni
5f9352986d ITS#9419 fix comparison 2021-03-15 19:03:59 +00:00
Quanah Gibson-Mount
5d5f431868 ITS#9490 - Add keepalive settings to ldap.conf 2021-03-04 17:11:35 +00:00
Ondřej Kuzník
568239731f ITS#8345 Remove LDIF_KLUDGE and defer defaults to _wrap() 2021-03-03 10:37:19 +00:00
Matus Honek
1cb4d2f0c9 ITS#8904 - Ensure SSLv3 is enabled when necessary
Either at compilation time, or as a system-wide configuration, OpenSSL
may have disabled SSLv3 protocol by default. This change ensures the
protocol NO flag is cleared when necessary, hence allowing for the
protocol to be used.
2021-02-26 18:30:38 +00:00
Quanah Gibson-Mount
a84d11dcce ITS#9422 - Update for TLS v1.3 2021-02-25 21:32:58 +00:00
Paul B. Henson
146889f205 ITS#9419 Add support for HAProxy proxy protocol v2 2021-02-24 18:11:09 +00:00
Quanah Gibson-Mount
ce2c5173bd ITS#9161 - Fix various typos
Fix a number of different typos across the code base
2021-02-17 18:42:46 +00:00
Howard Chu
00a5815c2c ITS#9465 remove assert in ldap_get_option()
Since it's already checked for error
2021-02-11 17:03:32 +00:00
Ondřej Kuzník
08f07b2ac1 Fix typo in MS AD persistent search ctrl 2021-02-04 15:55:57 +00:00
Quanah Gibson-Mount
61f619043e ITS#8580 - Explicitly honor the server side cipher suite preference 2021-01-28 20:22:50 +00:00
Quanah Gibson-Mount
efaf9a4a17 Happy New Year! 2021-01-11 19:25:53 +00:00
Howard Chu
d2936fb1d5 ITS#9425 add more checks to ldap_X509dn2bv 2020-12-14 20:05:44 +00:00
Howard Chu
c944dc55b7 ITS#9423 ldap_X509dn2bv: check for invalid BER after RDN count 2020-12-13 21:52:00 +00:00
Ondřej Kuzník
3f5293e145 ITS#5422 Save errno before passing it to Debug() 2020-09-24 23:34:36 +00:00
Howard Chu
c3131eb5a3 ITS#9348 replace all uses of STRERROR with AC_STRERROR_R
Avoid using sys_errlist unless there's no other choice
2020-09-24 23:34:36 +00:00
Howard Chu
6d7c2511b4 ITS#9201 partial revert 2020-09-03 21:08:17 +01:00
Howard Chu
ccfbb74c62 ITS#9201 additional fixes 2020-09-03 21:01:07 +01:00
Howard Chu
b24ca75993 ITS#9201 fix LDAP_THREAD_DEBUG
Add missing defs to ldap_thr_debug.h.
slap tools must init libldap so internal mutexes get inited.
2020-09-03 12:37:32 +01:00
Howard Chu
4c74bd0a41 ITS#9332 add placeholder in LDAP_LDO_TLS_NULLARG 2020-09-01 20:25:00 +01:00
Howard Chu
536767798b ITS#9054 fix typo 2020-08-27 11:22:58 +01:00
Howard Chu
e3faae939c ITS#9328 cldap: check for error on connected socket
libldap doesn't use a connected socket for UDP sessions, but 3rd
parties can, passed in with ldap_init_fd().
2020-08-26 20:53:38 +00:00
Quanah Gibson-Mount
c1411b8199 ITS#9323 - Limit to OpenSSL 1.0.2 or later 2020-08-25 21:52:04 +00:00
Howard Chu
608a822349 ITS#9318 add TLS_REQSAN option
Add an option to specify how subjectAlternativeNames should be
handled when validating the names in a server certificate.
2020-08-21 18:05:08 +00:00
Howard Chu
2386a11649 ITS#9054 Add support for multiple EECDH curves
Requires OpenSSL 1.0.2 or newer
2020-08-21 07:58:07 +01:00
Howard Chu
9d2f15307d ITS#7926 dynamic changes to olcListenerThreads
Reallocates sockets from old to new listener threads
2020-08-18 22:37:50 +01:00
Ondřej Kuzník
917fcc03ee ITS#9279 Send Netscape expired control as a bare string 2020-07-27 14:22:24 +02:00
Ondřej Kuzník
fd921e7121 ITS#9279 Expose Netscape password policy controls in libldap 2020-07-22 18:57:38 +00:00
Quanah Gibson-Mount
21eef84a49 ITS#9275 -- Update wording to remove slave and master terms, consolidate on provider/consumer 2020-07-18 16:27:04 +00:00
Howard Chu
24b45f57f2 ITS#9287 use getaddrinfo for ldap_pvt_get_fqdn
If getaddrinfo is available, should use it here
2020-07-16 21:08:36 +01:00