mirror of
https://git.openldap.org/openldap/openldap.git
synced 2025-01-24 13:24:56 +08:00
d78cf81648
OpenLDAP built with OpenSSL allows most any value of cacertdir - directory is a file, directory does not contain any CA certs, directory does not exist - users expect if they specify TLS_REQCERT=never, no matter what the TLS_CACERTDIR setting is, TLS/SSL will just work. TLS_CACERT, on the other hand, is a hard error. Even if TLS_REQCERT=never, if TLS_CACERT is specified and is not a valid CA cert file, TLS/SSL will fail. This patch makes CACERT errors hard errors, and makes CACERTDIR errors "soft" errors. The code checks CACERT first and, even though the function will return an error, checks CACERTDIR anyway so that if the user sets TRACE mode they will get CACERTDIR processing messages. |
||
|---|---|---|
| build | ||
| clients | ||
| contrib | ||
| doc | ||
| include | ||
| libraries | ||
| servers | ||
| tests | ||
| .gitattributes | ||
| .gitignore | ||
| aclocal.m4 | ||
| configure | ||
| configure.in | ||
| COPYRIGHT | ||
| INSTALL | ||
| LICENSE | ||
| Makefile.in | ||
| README | ||
OpenLDAP Devel README This software was obtained from the development branch (HEAD) of the OpenLDAP Software Repository. This copy is likely already not current, the development branch changes frequently. These changes include code implementing experimental features and unproven bug fixes. Please do NOT redistribute copies of the development branch. The OpenLDAP Developer's FAQ is available at: <http://www.openldap.org/faq/index.cgi?file=4> Client developers seeking a suitable development platform should use "release" or "stable" versions. <http://www.openldap.org/software/> Contributing See <http://www.openldap.org/devel/contributing.html> for how to contribute code or documentation to OpenLDAP. Use the Issue Tracking System <http://www.openldap.org/its/> to submit contributions. While you are encouraged to coordinate and discuss the development activities on the openldap-devel@openldap.org mailing list prior to submission, it is noted that contributions must be submitted using the Issue Tracking System to be considered. --- $OpenLDAP$ This work is part of OpenLDAP Software <http://www.openldap.org/>. Copyright 1998-2011 The OpenLDAP Foundation. All rights reserved. Redistribution and use in source and binary forms, with or without modification, are permitted only as authorized by the OpenLDAP Public License. A copy of this license is available in the file LICENSE in the top-level directory of the distribution or, alternatively, at <http://www.OpenLDAP.org/license.html>. OpenLDAP is a registered trademark of the OpenLDAP Foundation.