Howard Chu
|
ff8838aa28
|
ITS#5920 restore old HAS_TLS test
|
2009-02-04 08:56:04 +00:00 |
|
Howard Chu
|
2b08e96b53
|
ITS#5916 - externally callable functions are ldap_pvt, not ldap_int.
|
2009-02-02 21:14:34 +00:00 |
|
Pierangelo Masarati
|
0ded1f16d5
|
Allow alias dereferencing in search C API; use new API in proxy backends (ITS#5916)
|
2009-01-31 10:27:07 +00:00 |
|
Howard Chu
|
08905d6792
|
ITS#5789 again
|
2009-01-26 21:08:55 +00:00 |
|
Howard Chu
|
f59ce2b9a1
|
ITS#5462 add randfile support for gcrypt 1.4
|
2009-01-26 03:41:27 +00:00 |
|
Howard Chu
|
2558951251
|
ITS#5887 add native support for cipher suites for GnuTLS >= 2.2.0
|
2009-01-26 03:21:16 +00:00 |
|
Howard Chu
|
f9fd0f0cc4
|
ITS#5655 for new structure
|
2009-01-26 02:16:46 +00:00 |
|
Howard Chu
|
4dff3e6807
|
Switch to using modular TLS code, single-implementation version
|
2009-01-26 02:06:45 +00:00 |
|
Howard Chu
|
988fb232d2
|
ITS#5896 don't return immediately on Intermediate responses
|
2009-01-24 07:18:35 +00:00 |
|
Howard Chu
|
cf1558659b
|
ITS#5655 TLS_PROTOCOL_MIN from Philip Guenther
|
2009-01-24 03:34:49 +00:00 |
|
Kurt Zeilenga
|
4af9eb9715
|
Update copyright notices
|
2009-01-22 00:40:04 +00:00 |
|
Ralf Haferkamp
|
af79710c4d
|
Fixed typo
|
2008-12-12 10:08:07 +00:00 |
|
Howard Chu
|
187efdad6c
|
ITS#5849 free peer cert after retrieving DN
|
2008-12-05 09:00:24 +00:00 |
|
Howard Chu
|
a6933cae27
|
Fix prev commit
|
2008-11-21 05:15:20 +00:00 |
|
Howard Chu
|
86b5de38be
|
ITS#5812 add SASL_NOCANON / -N option
|
2008-11-21 03:30:15 +00:00 |
|
Howard Chu
|
0bd6ce1062
|
ITS#4750 only read LDAP_CONF_FILE if geteuid() != getuid()
|
2008-11-21 02:15:47 +00:00 |
|
Pierangelo Masarati
|
2eeefd4985
|
check for bogus params to an LDAP routine (ITS#5817)
|
2008-11-18 16:27:50 +00:00 |
|
Hallvard Furuseth
|
c7002ffed5
|
ITS#5815: Fix typo "#elif defined( MAXHOSTNAMELEN".
|
2008-11-16 22:52:56 +00:00 |
|
Howard Chu
|
36124c715a
|
ITS#5789 GNUtls - allow CN matches against IP addresses
|
2008-11-04 11:21:52 +00:00 |
|
Howard Chu
|
24078323e2
|
ITS#5739 fix for ITS#4879 was too eager about IPv6 detection
|
2008-11-03 15:44:49 +00:00 |
|
Hallvard Furuseth
|
8690650121
|
ITS#4467: Fix ptr += snprintf buffer overflow tests (made out-of-range ptr).
Also avoid a buf[BUFSIZ] initialization.
|
2008-10-24 13:11:10 +00:00 |
|
Pierangelo Masarati
|
6bedf74c41
|
tag optional stuff
|
2008-10-22 23:38:09 +00:00 |
|
Pierangelo Masarati
|
91e14ca638
|
add support for (experimental) dereference control (ITS#5768); need to re-run autoconf (and autoheader?)
|
2008-10-22 22:19:49 +00:00 |
|
Pierangelo Masarati
|
2b95616768
|
missing $OpenLDAP$ header
|
2008-10-22 21:57:28 +00:00 |
|
Ralf Haferkamp
|
e8c1147b77
|
reset ld->ld_errno to avoid returning error codes of previously API calls (ITS#5762)
|
2008-10-21 16:17:41 +00:00 |
|
Hallvard Furuseth
|
08852acb80
|
Warning cleanup: signed meets unsigned, remove assert(unsigned >= 0).
|
2008-10-17 23:24:48 +00:00 |
|
Hallvard Furuseth
|
b464a790b8
|
Fix Debug(%d, scred->bv_len or -1) -> Debug(%ld, (long) scred->bv_len or -1L).
Cast sasl_encode() arg from unsigned char* to char*.
Warning cleanup: signed meets unsigned.
|
2008-10-17 20:46:44 +00:00 |
|
Hallvard Furuseth
|
1c85cf3c88
|
Warning cleanup: signed meets unsigned. ber_flatten2() returns -1 on
error, not LBER_ERROR.
|
2008-10-13 08:44:54 +00:00 |
|
Howard Chu
|
9078381252
|
Cleanup unused defs
|
2008-10-09 11:33:49 +00:00 |
|
Howard Chu
|
4294664aad
|
ITS#5369 SASL/GSSAPi refactoring from Stefan Metzmacher <metze@samba.org>
and Rafal Szczeniak <mimir@samba.org>, with minor cleanups
|
2008-10-09 11:10:28 +00:00 |
|
Howard Chu
|
f7484f78e6
|
ITS#5369 SASL/GSSAPi refactoring from Stefan Metzmacher <metze@samba.org>
and Rafal Szczeniak <mimir@samba.org>, with minor cleanups
|
2008-10-09 10:51:28 +00:00 |
|
Howard Chu
|
b2432fdbf2
|
Add SASL_MECHLIST option to retrieve list of known SASL mechs
|
2008-10-09 09:28:39 +00:00 |
|
Howard Chu
|
c51252633b
|
Accept X-starttls for prev commit
|
2008-10-07 03:13:00 +00:00 |
|
Howard Chu
|
809548c88b
|
Handle StartTLS in URL extensions
|
2008-10-07 03:06:44 +00:00 |
|
Howard Chu
|
99186a90e0
|
Fix prev commit
|
2008-09-30 22:22:31 +00:00 |
|
Howard Chu
|
721264db13
|
ITS#5720 fix ldap_utf8_strchr arguments
|
2008-09-30 05:05:53 +00:00 |
|
Ralf Haferkamp
|
0f4f9c9c13
|
Avoid "label at end of compound statement" error of newer gcc
|
2008-09-19 12:58:00 +00:00 |
|
Pierangelo Masarati
|
43ae03fc10
|
silence warnings
|
2008-09-16 14:10:02 +00:00 |
|
Howard Chu
|
cc94023c98
|
ITS#5677 s/TLS_CRL/TLS_CRLFILE/
|
2008-09-02 22:10:44 +00:00 |
|
Howard Chu
|
0dbeb1d87b
|
Pass LDAPURLDescs to connect functions instead of host/port
|
2008-08-15 22:53:47 +00:00 |
|
Howard Chu
|
46049f1d13
|
Fix prev commit
|
2008-08-15 10:53:11 +00:00 |
|
Howard Chu
|
baad2b249d
|
Connect callbacks need error recovery checks
|
2008-08-15 10:23:29 +00:00 |
|
Howard Chu
|
80d1dba901
|
Add LDAP_OPT_CONNECT_CB connection callbacks
|
2008-08-14 04:54:32 +00:00 |
|
Howard Chu
|
a225b02f17
|
Modular TLS support, proof of concept. tls2.c would replace tls.c,
but I'm leaving tls.c intact for now.
|
2008-08-13 16:18:51 +00:00 |
|
Howard Chu
|
27fc008761
|
Protect errno values from Debug
|
2008-07-02 16:43:51 +00:00 |
|
Howard Chu
|
7e4ba700f1
|
ITS#5585 GnuTLS key strength is in bytes, we expected bits
|
2008-06-30 23:32:35 +00:00 |
|
Howard Chu
|
9ef6cc3cd4
|
ITS#5577 GnuTLS CRL result >0 is success
|
2008-06-24 20:14:30 +00:00 |
|
Pierangelo Masarati
|
7e3c9a07e9
|
add client API for assertion control (ITS#5560)
|
2008-06-14 17:49:47 +00:00 |
|
Howard Chu
|
99160d7c20
|
ITS#5542 fix loop iterator
|
2008-05-30 17:29:47 +00:00 |
|
Howard Chu
|
19d7e565f0
|
ITS#5318 drop invalid msgids, cleanup msgid logging
|
2008-05-28 01:19:43 +00:00 |
|