Howard Chu
16fcba1e98
ITS#9541 fix typo in util-int.c
...
From 94fbd96826
2021-04-30 09:25:13 +01:00
Nadezhda Ivanova
db389d38ce
ITS#9502 Implement LDAP_OPT_TCP_USER_TIMEOUT
2021-04-22 21:52:12 +00:00
Howard Chu
edfc4e7ffe
ITS#9530 ldo_defbase now must be freed in ldap_ld_free()
2021-04-21 18:06:26 +01:00
Norm Green
87397b345b
ITS#9530 fix double-free of LDAP_OPT_DEFBASE
2021-04-21 18:03:43 +01:00
Ondřej Kuzník
7df2a0f394
ITS#8847 Allocate a large enough buffer
2021-04-15 15:16:19 +01:00
Andreas Schulze
680091b5b4
ITS#8586 load cert+chain from TLSCertificateFile
...
For OpenSSL
2021-04-12 20:32:09 +01:00
Howard Chu
e0dcf4c4d7
ITS#9518 fix prev commit
2021-04-09 19:29:11 +01:00
Howard Chu
fe6a740381
ITS#9521 clarify - affects OpenSSL 1.1.1, not 1.1.0
2021-04-09 18:23:53 +01:00
Howard Chu
2a3b64f4e6
ITS#9518 add LDAP_OPT_X_TLS_PROTOCOL_MAX option
...
OpenSSL only
2021-04-09 18:12:40 +01:00
Howard Chu
b72bce2400
ITS#9521 Set TLSv1.3 cipher suites for OpenSSL 1.1
2021-04-09 15:59:22 +01:00
Howard Chu
94fbd96826
ITS#9513 Change all lutil time structs to use nanoseconds
...
Instead of microseconds
2021-03-31 18:53:50 +00:00
Ondřej Kuzník
3bd1b0909a
ITS#9001 Use a TAvl for request tracking in libldap
2021-03-30 15:46:40 +01:00
Ondřej Kuzník
e36d1e31c5
ITS#9001 manual changes
2021-03-30 15:46:40 +01:00
Quanah Gibson-Mount
38d1ac0449
ITS#5365 - Add support for symbol versioning libldap and lilber
2021-03-29 18:11:00 +00:00
Howard Chu
bc0d62db23
Revert "ITS#8847 more fallout from ldap_pvt_sockaddrstr move"
...
This reverts commit f2ddf89e3c
.
Move Sockaddr def to ac/socket.h instead.
2021-03-27 10:38:59 +00:00
Howard Chu
f2ddf89e3c
ITS#8847 more fallout from ldap_pvt_sockaddrstr move
2021-03-26 14:12:47 +00:00
Howard Chu
829263c454
ITS#8847 move lutil_sockaddrstr() to ldap_pvt_sockaddrstr()
2021-03-26 13:45:26 +00:00
HoweverAT
9d594a118e
ITS#8847 Add SOCKET_BIND_ADDRESSES Option
2021-03-25 18:47:11 +00:00
HoweverAT
8ebd065048
ITS#8847 Print local address in connection dump
2021-03-25 17:37:26 +00:00
Howard Chu
bb6844e296
ITS#7295 don't init TLS threads by default
...
Do it explicitly in servers
2021-03-21 15:26:57 +00:00
Hugh McMaster
baee6c47e7
ITS#8996 - Generate and install a pkg-config file for the libldap library
2021-03-15 21:39:55 +00:00
Tero Saarni
5f9352986d
ITS#9419 fix comparison
2021-03-15 19:03:59 +00:00
Quanah Gibson-Mount
5d5f431868
ITS#9490 - Add keepalive settings to ldap.conf
2021-03-04 17:11:35 +00:00
Ondřej Kuzník
568239731f
ITS#8345 Remove LDIF_KLUDGE and defer defaults to _wrap()
2021-03-03 10:37:19 +00:00
Matus Honek
1cb4d2f0c9
ITS#8904 - Ensure SSLv3 is enabled when necessary
...
Either at compilation time, or as a system-wide configuration, OpenSSL
may have disabled SSLv3 protocol by default. This change ensures the
protocol NO flag is cleared when necessary, hence allowing for the
protocol to be used.
2021-02-26 18:30:38 +00:00
Quanah Gibson-Mount
a84d11dcce
ITS#9422 - Update for TLS v1.3
2021-02-25 21:32:58 +00:00
Paul B. Henson
146889f205
ITS#9419 Add support for HAProxy proxy protocol v2
2021-02-24 18:11:09 +00:00
Quanah Gibson-Mount
ce2c5173bd
ITS#9161 - Fix various typos
...
Fix a number of different typos across the code base
2021-02-17 18:42:46 +00:00
Howard Chu
00a5815c2c
ITS#9465 remove assert in ldap_get_option()
...
Since it's already checked for error
2021-02-11 17:03:32 +00:00
Ondřej Kuzník
08f07b2ac1
Fix typo in MS AD persistent search ctrl
2021-02-04 15:55:57 +00:00
Quanah Gibson-Mount
61f619043e
ITS#8580 - Explicitly honor the server side cipher suite preference
2021-01-28 20:22:50 +00:00
Quanah Gibson-Mount
efaf9a4a17
Happy New Year!
2021-01-11 19:25:53 +00:00
Howard Chu
d2936fb1d5
ITS#9425 add more checks to ldap_X509dn2bv
2020-12-14 20:05:44 +00:00
Howard Chu
c944dc55b7
ITS#9423 ldap_X509dn2bv: check for invalid BER after RDN count
2020-12-13 21:52:00 +00:00
Ondřej Kuzník
3f5293e145
ITS#5422 Save errno before passing it to Debug()
2020-09-24 23:34:36 +00:00
Howard Chu
c3131eb5a3
ITS#9348 replace all uses of STRERROR with AC_STRERROR_R
...
Avoid using sys_errlist unless there's no other choice
2020-09-24 23:34:36 +00:00
Howard Chu
6d7c2511b4
ITS#9201 partial revert
2020-09-03 21:08:17 +01:00
Howard Chu
ccfbb74c62
ITS#9201 additional fixes
2020-09-03 21:01:07 +01:00
Howard Chu
b24ca75993
ITS#9201 fix LDAP_THREAD_DEBUG
...
Add missing defs to ldap_thr_debug.h.
slap tools must init libldap so internal mutexes get inited.
2020-09-03 12:37:32 +01:00
Howard Chu
4c74bd0a41
ITS#9332 add placeholder in LDAP_LDO_TLS_NULLARG
2020-09-01 20:25:00 +01:00
Howard Chu
536767798b
ITS#9054 fix typo
2020-08-27 11:22:58 +01:00
Howard Chu
e3faae939c
ITS#9328 cldap: check for error on connected socket
...
libldap doesn't use a connected socket for UDP sessions, but 3rd
parties can, passed in with ldap_init_fd().
2020-08-26 20:53:38 +00:00
Quanah Gibson-Mount
c1411b8199
ITS#9323 - Limit to OpenSSL 1.0.2 or later
2020-08-25 21:52:04 +00:00
Howard Chu
608a822349
ITS#9318 add TLS_REQSAN option
...
Add an option to specify how subjectAlternativeNames should be
handled when validating the names in a server certificate.
2020-08-21 18:05:08 +00:00
Howard Chu
2386a11649
ITS#9054 Add support for multiple EECDH curves
...
Requires OpenSSL 1.0.2 or newer
2020-08-21 07:58:07 +01:00
Howard Chu
9d2f15307d
ITS#7926 dynamic changes to olcListenerThreads
...
Reallocates sockets from old to new listener threads
2020-08-18 22:37:50 +01:00
Ondřej Kuzník
917fcc03ee
ITS#9279 Send Netscape expired control as a bare string
2020-07-27 14:22:24 +02:00
Ondřej Kuzník
fd921e7121
ITS#9279 Expose Netscape password policy controls in libldap
2020-07-22 18:57:38 +00:00
Quanah Gibson-Mount
21eef84a49
ITS#9275 -- Update wording to remove slave and master terms, consolidate on provider/consumer
2020-07-18 16:27:04 +00:00
Howard Chu
24b45f57f2
ITS#9287 use getaddrinfo for ldap_pvt_get_fqdn
...
If getaddrinfo is available, should use it here
2020-07-16 21:08:36 +01:00