Rich Megginson 210b156ece ITS#7002 MozNSS: fix VerifyCert allow/try behavior ... If the olcTLSVerifyClient is set to a value other than "never", the server should request that the client send a client certificate for possible use with client cert auth (e.g. SASL/EXTERNAL). If set to "allow", if the client sends a cert, and there are problems with it, the server will warn about problems, but will allow the SSL session to proceed without a client cert. If set to "try", if the client sends a cert, and there are problems with it, the server will warn about those problems, and shutdown the SSL session. If set to "demand" or "hard", the client must send a cert, and the server will shutdown the SSL session if there are problems. I added a new member of the tlsm context structure - tc_warn_only - if this is set, tlsm_verify_cert will only warn about errors, and only if TRACE level debug is set. This allows the server to warn but allow bad certs if "allow" is set, and warn and fail if "try" is set.		2011-07-28 14:09:55 -07:00
..
liblber	ITS#6870 Reverted last commit	2011-03-18 15:18:42 +00:00
libldap	ITS#7002 MozNSS: fix VerifyCert allow/try behavior	2011-07-28 14:09:55 -07:00
libldap_r	ITS#6870 move ldif.c and fetch.c from liblutil to libldap	2011-03-24 06:49:04 +00:00
liblunicode
liblutil	ITS#6982 fix md5 memset invocation	2011-07-01 22:55:06 -07:00
librewrite	ITS#6932: Clean up strange asserts & nearby code.	2011-05-05 15:55:29 +02:00
Makefile.in	ITS#6870 Reverted last commit	2011-03-18 15:18:42 +00:00