Howard Chu
2b67f4face
ITS#5056 fix chain_tail processing
2007-07-20 21:28:04 +00:00
Ralf Haferkamp
6ab46208bc
Allow utf-8 in AD-Canonical Names
2007-07-13 10:12:27 +00:00
Pierangelo Masarati
848ea293a3
cleanup
2007-06-19 22:59:53 +00:00
Pierangelo Masarati
7e12342b3b
add sub-second result timeout accuracy (for which is which; ITS#4963 with changes)
2007-06-14 22:35:41 +00:00
Hallvard Furuseth
90fe4bd927
ITS#4983: Partly revert tls_thread_self() paranoia from rev 1.154: Only
...
require that ldap_pvt_thread_t can be cast to u.long and is not wider.
ITS#5010: In ldap_X509dn2bv(), catch error return from ber_decode_oid().
2007-06-12 23:57:08 +00:00
Hallvard Furuseth
5d083f3859
int -> ber_socklen_t for getsockopt()
2007-06-10 20:34:05 +00:00
Hallvard Furuseth
3750520f6f
Fix HP-UX crash: Replace socklen_t with ber_socklen_t from configure. ITS#4629.
2007-06-09 23:35:20 +00:00
Howard Chu
469a45a62f
ITS#4992 fix cldap
2007-06-08 09:40:17 +00:00
Howard Chu
431f6fd810
ITS#4955 fix typo in referral chasing
2007-06-08 09:17:00 +00:00
Hallvard Furuseth
9a9d216526
Shut up gcc -Wformat
2007-05-31 17:07:57 +00:00
Hallvard Furuseth
101b6b9363
Fix --without-tls (ITS#4975). Enable certificate matching.
2007-05-20 22:48:21 +00:00
Hallvard Furuseth
c47e444698
libldap/tls.c calls CRYPTO_set_id_callback(ldap_pvt_thread_self), which
...
causes ldap_pvt_thread_self to be called with the wrong prototype.
That can cause OpenSSL to use a garbage value, e.g. if the unsigned
long it expects takes two words but ldap_pvt_thread_t is an int.
I'm fixing it in HEAD now and also provoking an error if unsigned
long cannot hold a ldap_pvt_thread_t. Otherwise it can silently
compile to broken code. Maybe the latter should go in configure,
but since OpenSSL presumably breaks anyway if that fails I don't
see much point at this time.
2007-05-20 20:02:52 +00:00
Hallvard Furuseth
f906a99eec
Only define x509_cert_get_dn() when HAVE_GNUTLS. Remove unused variable.
2007-05-18 15:10:15 +00:00
Howard Chu
d9a43aee44
Fix GNUtls acknowledgement, initial work by Matt Backes. Sponsored by
...
The Written Word and Stanford University.
2007-05-14 23:35:36 +00:00
Ralf Haferkamp
6ee5d7d3da
make openssl builds working again
2007-05-14 12:19:32 +00:00
Howard Chu
423f20c915
GNUtls - ignore free of NULL ctx
2007-05-13 09:43:41 +00:00
Howard Chu
5f36d32596
Don't NUL-terminate bervals during DN parsing
2007-05-13 09:37:37 +00:00
Howard Chu
47a8f3213b
Merged GNUtls support into main tls.c
2007-05-13 00:15:27 +00:00
Pierangelo Masarati
7601a1f3fb
fix read off by one (spotted by valgrind)
2007-05-12 12:38:09 +00:00
Howard Chu
236e5f50b3
Added ciphersuite support
2007-05-10 21:49:43 +00:00
Howard Chu
c51fd6c96e
Add LDAP_OPT_X_TLS_CRLFILE, peer cert verification for GNUtls
2007-05-10 19:43:28 +00:00
Hallvard Furuseth
7b7b137832
Cast Debug(%p) pointer argument to void*
2007-05-09 18:38:10 +00:00
Howard Chu
b7cfa97817
coverity error, u->lud_scheme is mandatory
2007-05-08 14:13:18 +00:00
Howard Chu
4803e9ba67
Revert prev commit, unnecessary
2007-04-23 14:27:07 +00:00
Howard Chu
7eb1f62f9d
ITS#4935 SASL_MAX_BUFF_SIZE should be 2^24 - 1
2007-04-23 14:21:48 +00:00
Pierangelo Masarati
f29a4e140e
don't assert(0); apparently, other responses may result from a simple bind (but log them, at least; ITS#4924)
2007-04-11 08:57:41 +00:00
Howard Chu
848be16aaf
ITS#4879 fixes for url parse/unparse
2007-04-03 03:27:24 +00:00
Howard Chu
c49812bf6f
ITS#4893 back to pipes...
2007-03-26 12:44:11 +00:00
Howard Chu
867fb2fd9f
ITS#4893 just send the client socket, not a pipe descriptor.
2007-03-25 15:20:50 +00:00
Howard Chu
7426ab07fc
ITS#4893 define LDAP_PF_LOCAL_SENDMSG in <ac/socket.h> if a message must
...
be sent to transmit client credentials. Buffer the message data.
2007-03-25 04:40:22 +00:00
Howard Chu
49d708fae3
Preliminary GNUtls support. gnutls.c will merge back into tls.c later.
2007-03-23 23:47:07 +00:00
Howard Chu
f2a02b90ed
Fix TLS default for clients
2007-03-23 12:47:35 +00:00
Pierangelo Masarati
1429b49d1e
apparently, time_t is unsigned in some systems
2007-03-12 21:04:01 +00:00
Pierangelo Masarati
687ed8861a
don't play with URL list if connect(2) is asynchronous
2007-02-21 22:26:26 +00:00
Kurt Zeilenga
b3c4004042
Remove extrananous space in DN (in comment)
2007-02-19 23:39:01 +00:00
Kurt Zeilenga
7beb587a4b
Cleanup last commit
2007-02-15 01:42:23 +00:00
Kurt Zeilenga
a9aeb858fe
Needs <ac/time.h>
2007-02-15 01:20:46 +00:00
Howard Chu
8db4bd2cc9
Coverity error, uninit'd rc
2007-02-13 11:13:14 +00:00
Howard Chu
1f635b8bcf
ITS#4707 added new ldap_init_fd() API
2007-02-12 04:20:24 +00:00
Howard Chu
a1aa7c284d
Revert to original ldap_get_option( TIMEOUT ) behavior
2007-02-06 23:02:47 +00:00
Howard Chu
75d0b4ee97
Require non-NULL input for timeout options
2007-02-05 20:38:25 +00:00
Howard Chu
0c542682b1
Timeouts should not be malloc'd
2007-02-05 20:32:44 +00:00
Howard Chu
b984564dbd
Handle timeouts from ldap_result()
2007-02-05 12:30:40 +00:00
Howard Chu
b4c2cf250d
Fairly sure this is what the TIMEOUT option should always have been for
2007-02-05 10:10:24 +00:00
Pierangelo Masarati
5afd693a6d
remove unused code
2007-02-02 12:38:32 +00:00
Howard Chu
de46a75158
Keep HAVE_POLL functionality inside its #ifdefs
2007-02-02 12:29:21 +00:00
Howard Chu
52a7af8230
ITS#4815 get_option for TLS Cipher Suite was not implemented
2007-01-24 23:38:26 +00:00
Hallvard Furuseth
d16754c81b
Delete unused variables.
2007-01-11 12:04:22 +00:00
Howard Chu
f1784a54e6
ITS#4648, alternate fix
2007-01-10 08:52:07 +00:00
Howard Chu
bec25494fe
ITS#4799 remove kerberos / kbind references
2007-01-10 00:20:42 +00:00
