Quanah Gibson-Mount
762d7b075e
Merge remote-tracking branch 'origin/mdb.RE/0.9'
2018-03-22 15:28:21 +00:00
Quanah Gibson-Mount
5033a08c86
Update release date
2018-03-22 15:23:05 +00:00
Quanah Gibson-Mount
385193cd52
Happy New Year
2018-03-22 15:22:03 +00:00
Howard Chu
2f4948f1e4
Release 0.9.22
2018-03-21 22:50:02 +00:00
Howard Chu
e77918a903
ITS#8819 can't use fakepage mp_ptrs directly
2018-03-21 22:48:04 +00:00
Quanah Gibson-Mount
6f9a9ca825
Merge remote-tracking branch 'origin/mdb.RE/0.9'
2018-02-11 21:02:26 +00:00
Quanah Gibson-Mount
a351fe0b64
ITS#8722
2018-02-11 21:02:05 +00:00
Hallvard Furuseth
f6514da360
Tweak ITS#8722 fix: Use XCURSOR_REFRESH()
...
This checks XCURSOR_INITED() and fixes the mn_flags check.
2018-02-11 20:59:44 +00:00
Hallvard Furuseth
40daa8e73f
XCURSOR_REFRESH() fixups/cleanup
...
* Check NUMKEYS(), similar to f34b61f947
"ITS#8722 fix FIRST_DUP/LAST_DUP cursor bounds check".
* Move XCURSOR_INITED() into XCURSOR_REFRESH(). This adds a check in
mdb_cursor_put, below /* converted, write the original data first */.
* Factor mc_ki[] out to XCURSOR_REFRESH().
* Replace an mc_pg[] with mp which is equal (mdb_cursor_del0).
2018-02-11 20:59:37 +00:00
Howard Chu
98b2910ee8
ITS#8722 fix FIRST_DUP/LAST_DUP cursor bounds check
2018-02-11 20:59:28 +00:00
Quanah Gibson-Mount
264263484b
ITS#8622
2018-02-11 20:58:54 +00:00
Howard Chu
35251f6847
ITS#8699 more for cursor_del ITS#8622
...
Set C_DEL flag on reinit'd subcursor
2018-02-11 20:57:50 +00:00
Quanah Gibson-Mount
3b1acd40cd
Fix ITS location
2018-02-09 19:00:38 +00:00
Quanah Gibson-Mount
735b6c995e
Merge remote-tracking branch 'origin/mdb.RE/0.9'
2018-02-09 18:49:21 +00:00
Quanah Gibson-Mount
e20e307929
ITS#8760
2018-02-09 18:47:21 +00:00
Howard Chu
a4d9a75a1e
ITS#8760 fix regression in 0.9.19
2018-02-09 18:46:40 +00:00
Quanah Gibson-Mount
4ac16b128c
ITS#8612
2018-02-09 18:46:06 +00:00
Quanah Gibson-Mount
b2426af3d1
ITS#8612 Fix Solaris builds with liblmdb
...
This patch fixes liblmdb builds on Solaris and derivatives by defining
_POSIX_PTHREAD_SEMANTICS
2018-02-09 18:45:37 +00:00
Quanah Gibson-Mount
3d8fc321d5
0.9.22 engineering
2018-02-09 18:45:20 +00:00
Howard Chu
650b4822ce
Avoid unnecessary C99 initializers
2018-01-25 15:40:26 +00:00
Howard Chu
f09ffffcbd
Cleanup warnings
2018-01-25 15:36:00 +00:00
Bradley Baetz
e5ee07785e
ITS#8791 fix OpenSSL 1.1.1 BIO_method compat
...
Use the new methods unconditionally, define helper functions for older versions.
2018-01-25 15:28:51 +00:00
Soohoon Lee
1863245f49
ITS#8484 - Fix MozNSS initialization
2017-12-08 07:00:02 -08:00
Howard Chu
f82ca15a18
ITS#8782 plug memleaks in cancel
2017-12-04 16:00:33 +00:00
Quanah Gibson-Mount
f5da6638ec
ITS#8753, ITS#8774 - Fix compilation with older versions of OpenSSL
2017-11-17 14:30:45 -08:00
Ondřej Kuzník
36da75830f
ITS#8753 Remove extraneous file
2017-11-14 09:28:18 +00:00
Ondřej Kuzník
8e34ed8c78
ITS#8753 Public key pinning support in libldap
2017-11-13 17:24:49 +00:00
Ondřej Kuzník
91ebfc82ea
ITS#8753 Move base64 decoding to separate file
2017-11-13 16:51:01 +00:00
Ondřej Kuzník
3d5a7545b9
Build internal avl testing tools correctly
2017-10-26 11:53:50 +01:00
Josh Soref
10566c8be3
ITS#8605 - spelling fixes
...
* javascript
* kernel
* ldap
* length
* macros
* maintained
* manager
* matching
* maximum
* mechanism
* memory
* method
* mimic
* minimum
* modifiable
* modifiers
* modifying
* multiple
* necessary
* normalized
* objectclass
* occurrence
* occurring
* offered
* operation
* original
* overridden
* parameter
* permanent
* preemptively
* printable
* protocol
* provider
* really
* redistribution
* referenced
* refresh
* regardless
* registered
* request
* reserved
* resource
* response
* sanity
* separated
* setconcurrency
* should
* specially
* specifies
* structure
* structures
* subordinates
* substitution
* succeed
* successful
* successfully
* sudoers
* sufficient
* superiors
* supported
* synchronization
* terminated
* they're
* through
* traffic
* transparent
* unsigned
* unsupported
* version
* absence
* achieves
* adamson
* additional
* address
* against
* appropriate
* architecture
* associated
* async
* attribute
* authentication
* authorized
* auxiliary
* available
* begin
* beginning
* buffered
* canonical
* certificate
* charray
* check
* class
* compatibility
* compilation
* component
* configurable
* configuration
* configure
* conjunction
* constraints
* constructor
* contained
* containing
* continued
* control
* convenience
* correspond
* credentials
* cyrillic
* database
* definitions
* deloldrdn
* dereferencing
* destroy
* distinguish
* documentation
* emmanuel
* enabled
* entry
* enumerated
* everything
* exhaustive
* existence
* existing
* explicitly
* extract
* fallthru
* fashion
* february
* finally
* function
* generically
* groupname
* happened
* implementation
* including
* initialization
* initializes
* insensitive
* instantiated
* instantiation
* integral
* internal
* iterate
2017-10-11 14:39:38 -07:00
Zebediah Figura
cc99da182f
ITS#8508 - Allow ucgendat.c to recognize title-case characters even if they do not have lower-case equivalents
...
I, Zebediah Figura, hereby place the following modifications to OpenLDAP Software (and only these modifications) into the public domain. Hence, these modifications may be freely used and/or redistributed for any purpose with or without attribution and/or other notice.
2017-10-11 14:32:16 -07:00
Nathaniel McCallum
29f6260364
ITS#7532 - Add new function ldap_connect().
...
This function is used to manually establish a connection after
a call to ldap_initialize(). This is primarily so that a file
descriptor can be obtained before any requests are sent for the
purposes of polling for writability.
2017-10-11 14:31:22 -07:00
Jan Vcelak
cbf5f03476
ITS#7389 - MozNSS: load certificates from certdb, fallback to PEM
...
If TLS_CACERT pointed to a PEM file and TLS_CACERTDIR was set to NSS
certificate database, the backend assumed that the certificate is always
located in the certificate database. This assumption might be wrong.
This patch makes the library to try to load the certificate from NSS
database and fallback to PEM file if unsuccessfull.
2017-10-06 13:59:07 -07:00
Ian Puleston
46c93e41f4
ITS#8167 Fix non-blocking TLS with referrals
2017-10-06 13:57:13 -07:00
Quanah Gibson-Mount
35a880c53e
ITS#8687 - EGD is disabled by default in OpenSSL 1.1. We need to comment out this block if it is not detected. Particularly affects cross compilation.
2017-10-06 13:48:40 -07:00
sca+openldap@andreasschulze.de
90835da72f
ITS#8578 - remove unused-variables in RE24 testing call (2.4.45)
2017-10-06 10:45:08 -07:00
Jan Vcelak
19fd969d21
ITS#7374 - MozNSS: better file name matching for hashed CA certificate directory
...
CA certificate files in OpenSSL compatible CACERTDIR were loaded if the
file extension was '.0'. However the file name should be 8 letters long
certificate hash of the certificate subject name, followed by a numeric
suffix which is used to differentiate between two certificates with the
same subject name.
Wit this patch, certificate file names are matched correctly (using
regular expressions).
2017-10-06 10:44:13 -07:00
Jan Vcelak
acc5b88661
ITS#7373 - TLS: do not reuse tls_session if hostname check fails
...
If multiple servers are specified, the connection to the first one
succeeds, and the hostname verification fails, *tls_session is not
dropped, but reused when connecting to the second server.
This is a problem with Mozilla NSS backend because another handshake
cannot be performed on the same file descriptor. From this reason,
hostname checking was moved into ldap_int_tls_connect() before
connection error handling.
2017-10-06 10:44:07 -07:00
Hallvard Furuseth
ff2d7cc798
ITS#8733 Allow a raw integer to be decoded from a berval
2017-09-28 14:15:06 +01:00
Hallvard Furuseth
62811e8f65
ITS#8733 Allow extraction of the complete ber element
2017-09-28 14:14:55 +01:00
Quanah Gibson-Mount
43a039eba4
ITS#7428 - Non-blocking TLS is not compatible with MOZNSS
2017-09-26 10:59:08 -07:00
Ondřej Kuzník
a8f01cc885
ITS#8638 Add a recursive mutex to libldap_r for libevent
...
Most thread implementations suppport a native recursive mutex, use that
where possible (especially when a regular mutex is recursive already).
Also provide a macro for applications to test whether they can use the
lock functions interchangeably.
2017-09-26 16:26:33 +01:00
Quanah Gibson-Mount
c1512eea58
Fix typo "errror" -> "error"
2017-09-08 12:03:02 -07:00
Howard Chu
01a5eeac1d
ITS#8727 plug ber leaks
2017-09-08 16:35:32 +01:00
Howard Chu
738723866e
ITS#8717 call connection delete callbacks
...
When TLS fails to start
2017-09-06 21:46:09 +01:00
Howard Chu
af92b8d2ca
ITS#8705 fix service pathname
...
Strip trailing space of last pathname component, if any. Not first.
2017-08-03 12:42:21 +01:00
Howard Chu
a58c01317c
Merge remote-tracking branch 'origin/mdb.RE/0.9'
2017-06-01 17:52:15 +01:00
Howard Chu
60d500206a
Release 0.9.21
2017-06-01 17:51:10 +01:00
Ryan Tandy
431c4af526
ITS#8648 init SASL library in global init
2017-05-07 21:29:44 +00:00
Ryan Tandy
e437b12277
ITS#8648 check result of ldap_int_initialize in ldap_{get,set}_option
2017-05-07 20:16:25 +00:00