Matúš Honěk
d181b0472d
Fix various MozNSS compatibility layer issues
...
+ Force write file with fsync to avoid race conditions
+ Always filestamp both sql and dbm NSS DB variants to not rely on default DB type prefix
+ Allow missing cert and key which is a valid usecase
+ Create extraction folder only in /tmp to simplify selinux rules
+ Fix Covscan issues
Related: #1400570
2017-12-06 15:13:49 +01:00
Matus Honek
d8e109406e
Merge #2 Do not call deleted script from %post section
2017-11-14 14:24:32 +00:00
Matúš Honěk
a33df4e168
Build with OpenSSL with MozNSS compatibility layer
...
Resolves : #1400570
2017-11-03 20:43:25 +01:00
Guido Aulisi
031e2b95cc
Do not call deleted script from %post section
...
Commit b730f13ce0
deleted certificate
generation scripts, but create_certdb.sh was still called from
%post section.
2017-10-31 23:21:05 +01:00
Fedora Release Engineering
671ba8f100
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
2017-08-03 04:32:58 +00:00
Fedora Release Engineering
00533e64f8
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
2017-07-27 01:49:08 +00:00
Petr Písař
3a8a7258ab
perl dependency renamed to perl-interpreter < https://fedoraproject.org/wiki/Changes/perl_Package_to_Install_Core_Modules >
2017-07-12 14:16:56 +02:00
Matúš Honěk
35246b7090
Merge branch 'f26' to 'master'
...
- Rebase to version 2.4.45 (#1458081 )
* fixes CVE-2017-9287 (#1456712 , #1456713 )
- Update the 'sources' file with new SHA512 hashes
Related: #1458081
2017-07-07 17:17:49 +02:00
Matúš Honěk
5c7cdc96e6
Rebase to version 2.4.45
...
Resolves : #1458081
2017-07-07 16:58:40 +02:00
Matúš Honěk
872ea264fa
Change Requires to Recommends for nss-tools
...
Resolves : #1415086
2017-07-07 13:49:14 +02:00
Jitka Plesnikova
7a68ca8d9c
Perl 5.26 rebuild
2017-06-04 14:18:11 +02:00
Matúš Honěk
af30ccf247
Merge branch 'f25' into f26 for linearity
...
Related: #1435692
2017-03-31 17:22:53 +02:00
Matúš Honěk
32c688fc27
NSS: Maximal TLS protocol version should be equal to NSS default
...
Related: #1435689
2017-03-31 17:08:11 +02:00
Matúš Honěk
8ba6f5c9b7
Merge branch 'f25' into f26 for linearity
...
Conflicts:
openldap.spec
Resolves : #1435692
2017-03-30 14:55:47 +02:00
Matúš Honěk
54f6fd1feb
NSS: Enhance OpenLDAP to support TLSv1.3 protocol with NSS
...
Resolves : #1435689
2017-03-24 20:23:40 +01:00
Matúš Honěk
d0828bee6c
NSS: Rearrange ciphers-, parsing-, and protocol-related patches
...
In addition, remove (or better, do not include anymore) unused
variables *variant* and *range* that were forgotten to be
removed when landing patch openldap-nss-protocol-version-new-api.patch
in commit 9e30b98
.
Related: #1435689
2017-03-24 20:02:46 +01:00
Fedora Release Engineering
8575fd0248
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
2017-02-11 00:53:32 +00:00
Matúš Honěk
0cc5bf7254
NSS: Update list of ciphers
...
Resolves : #1387868
2017-01-31 15:58:28 +01:00
Matúš Honěk
22dbdbf78a
NSS: Use what NSS considers default for DEFAULT cipher string.
...
Related: #1387868
2017-01-30 16:30:46 +01:00
Matúš Honěk
da1f719199
NSS: fix incorrect multi-keyword parsing and support new ones
...
- add multi_mask, negative_mask, and multi_strength
+ some keywords may describe multiple cipher suite parameters at once
- fix masks decision tree
+ all masks have to fit the cipher suite to include it
- correct 'action' evaluation
+ plus sign means ordering (which NSS does not support)
+ no sign presence means adding implicitly
- extend keywords for new future ciphers
Backporting: #1372349
Resolves : #1243517
2017-01-29 19:46:00 +01:00
Matúš Honěk
45704219c4
fix previous commit
...
Related: #1375432
2017-01-23 14:03:38 +01:00
Matúš Honěk
9e30b985ea
Setting olcTLSProtocolMin does not change supported protocols
...
Resolves : #1375432
2017-01-20 14:41:25 +01:00
Petr Písař
31ea2073c9
Mandatory Perl build-requires added < https://fedoraproject.org/wiki/Changes/Build_Root_Without_Perl >
2016-06-24 09:22:43 +02:00
Jitka Plesnikova
0087c276cd
Perl 5.24 rebuild
2016-05-15 06:06:55 +02:00
Matúš Honěk
ebc63b919d
Update to 2.4.44
...
Resolves : #1305191
2016-05-11 18:29:31 +02:00
Matúš Honěk
a0c7cda8b5
Bring back *.la files in %{_libdir}/openldap/
...
Related: #1331484
2016-05-03 19:12:27 +02:00
Matúš Honěk
ace19e3e36
Keep *.so libraries in %{_libdir}/openldap/
...
Resolves : #1331484
2016-04-28 17:43:08 +02:00
Matúš Honěk
8291cbaa23
Include AllOp overlay
...
Resolves : #1319782
2016-04-27 09:58:29 +02:00
Peter Robinson
eb29790db6
Ensure all libtool archive files are removed (.la)
2016-04-10 23:43:12 +01:00
Fedora Release Engineering
65a5310ab6
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
2016-02-04 11:29:03 +00:00
Matúš Honěk
ab9a93cce4
New upstream release 2.4.43
...
Resolves : #1253871
2016-01-21 16:40:54 +01:00
Matúš Honěk
0f227076e4
New upstream release 2.4.41
...
Resolves : #1238251
2015-07-16 10:51:37 +02:00
Dennis Gilmore
58ea27bc6e
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
2015-06-17 23:59:36 +00:00
Jitka Plesnikova
d22738532e
Perl 5.22 rebuild
2015-06-03 14:49:21 +02:00
Jan Synacek
443ffdd194
fix: bring back tmpfiles config ( #1215655 )
...
This reverts commit 521bbc2942
.
2015-04-27 15:20:45 +02:00
Jan Synacek
6e2cf23fa6
remove spurious ghosted file
2015-03-30 10:35:43 +02:00
Jan Synacek
592250ebfb
link against moznss again ( #1187742 )
...
Revert "link against openssl by default"
This reverts commit 72da77adb6
.
2015-02-20 11:06:24 +01:00
Jan Synacek
1fb41f2a59
fix: Unknown Berkeley DB major version in db.h ( #1191098 )
2015-02-11 10:52:43 +01:00
Jan Synacek
5a45ad5a72
CVE-2015-1545: slapd crashes on search with deref control ( #1190645 )
2015-02-10 09:33:10 +01:00
Jan Synacek
b730f13ce0
simplify package even more by removing certificate generation
...
Creating self-signed certificates for localhost is pointless. If anyone
uses TLS, they probably have their own. Testers can generate their own
as well, the package does't have to be plagued by scripts just because
of that.
2015-01-27 15:25:04 +01:00
Jan Synacek
72da77adb6
link against openssl by default
...
This is not an enhancement, this is a bugfix.
2015-01-27 15:19:00 +01:00
Jan Synacek
ee4af28583
simplify checking for missing server configuration
2015-01-26 14:24:55 +01:00
Jan Synacek
e143df31ee
fix invalid ldif introduced in 9a79680
2015-01-26 13:33:14 +01:00
Jan Synacek
521bbc2942
remove tmpfiles config since it's no longer needed
2015-01-26 13:31:31 +01:00
Jan Synacek
0fc0a68e34
renumber patches and sources
2015-01-21 14:24:49 +01:00
Jan Synacek
9a796804cd
remove pid file and args file
...
We have systemd for that.
2015-01-21 14:12:31 +01:00
Jan Synacek
b724454515
make mdb default after a new installation
2015-01-21 14:10:09 +01:00
Jan Synacek
7a8ba10b72
remove unneeded configure flags, disable sql backend and aci
...
Both SQL backend and ACI are experimental. SQL is unsupported.
2015-01-19 09:45:07 +01:00
Jan Synacek
41c84187a9
remove old F17 hack
2015-01-16 12:23:49 +01:00
Jan Synacek
c3de3dd938
remove openldap-syncrepl-unset-tls-options.patch
...
Unaccepted upstream, not an issue, documented in the man pages.
2015-01-16 10:28:54 +01:00
Jan Synacek
2594744e83
remove openldap-userconfig-setgid.patch
...
Pointless Fedora specific patch.
2015-01-16 10:27:49 +01:00
Jan Synacek
c1bd7d8503
remove openldap-ldaprc-currentdir.patch
...
The upstream ITS has been fixed a long time ago and this patch is Fedora
specific and pointless.
2015-01-16 10:08:38 +01:00
Jan Synacek
f1bc6682b9
remove openldap-fedora-systemd.patch
...
We don't use env variables anymore.
2015-01-16 09:08:08 +01:00
Jan Synacek
0625d0e501
provide an unversioned symlink to check_password.so.1.1
...
So the users don't have to specify the exact version in their configuration.
2014-12-17 15:32:22 +01:00
Jan Synacek
4840f8de8e
improve check_password
...
Fix Makefile to accept provided CFLAGS and LDFLAGS. Patch the code a bit.
2014-12-17 15:27:30 +01:00
Jan Synacek
098f3b5fe6
harden the build
2014-12-17 09:21:38 +01:00
Jan Synacek
40aff41da5
fix changelog after the revert
2014-12-17 09:21:02 +01:00
Jan Synacek
48c6d060f6
Revert "enhancement: generate openldap.pc ( #1171493 )"
...
This reverts commit 79a0b58108
.
2014-12-16 09:52:29 +01:00
Jan Synacek
79a0b58108
enhancement: generate openldap.pc ( #1171493 )
2014-12-09 12:34:25 +01:00
Jan Synacek
4b2abac9db
enhancement: support TLSv1 and later ( #1160466 )
2014-11-14 09:54:11 +01:00
Jan Synacek
90f2044e56
Merge branch 'master' into f21
...
Let's keep the history linear...
Conflicts:
openldap.spec
2014-10-06 10:24:40 +02:00
Jan Synacek
2c331b7581
new upstream release (2.4.40)
...
Resolves : #1147877
2014-09-30 13:44:19 +02:00
Jitka Plesnikova
3363e7a6da
Perl 5.20 rebuild
2014-08-27 11:12:00 +02:00
Peter Robinson
29e31a847d
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
2014-08-17 13:55:33 +00:00
Peter Robinson
330a8ceaa7
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
2014-08-17 13:55:22 +00:00
Tom Callaway
c64abcbb2f
fix license handling
2014-07-18 19:24:48 -04:00
Tom Callaway
cda7221c9b
fix license handling
2014-07-18 19:24:30 -04:00
Jan Synacek
826b3eb9d7
fix: fix typo in generate-server-cert.sh
...
Resolves : #1117229
2014-07-14 11:36:29 +02:00
Jan Synacek
abc96f87d2
fix: make default service configuration listen on ldaps:/// as well
...
Resolves : #1105634
2014-06-09 09:37:51 +02:00
Dennis Gilmore
45966edea7
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
2014-06-07 11:42:07 -05:00
Jan Synacek
b15ffab696
fix: remove correct tmp file when generating server cert ( #1103102 )
2014-05-30 11:12:59 +02:00
Jan Synacek
079ea99963
re-symlink unversioned libraries, so ldconfig is not confused
...
Resolves : #1028557
2014-03-24 11:41:00 +01:00
Jan Synacek
ca7444dd1a
don't automatically convert slapd.conf to slapd-config
...
It is not possible to convert every possible slapd.conf to slapd-config
and expect it to work. Also, it is bad to force conversion like that.
2014-03-04 10:10:57 +01:00
Jan Synacek
b3805b0a4c
alias slapd.service as openldap.service
2014-02-20 08:43:54 +01:00
Jan Synacek
b8fb685084
add documentation reference to service file
2014-02-20 08:41:48 +01:00
Jan Synacek
cb0643e628
remove redundant sysconfig-related stuff
2014-02-20 08:38:44 +01:00
Jan Synacek
8a6f427a71
CVE-2013-4449: segfault on certain queries with rwm overlay
...
Resolves : #1060851
2014-02-04 09:40:28 +01:00
Jan Synacek
5dba8cc33f
new upstream release (2.4.39)
...
Resolves : #1059186
2014-01-29 13:03:05 +01:00
Jan Synacek
6a944922ab
new upstream release (2.4.38)
...
Resolves : #1031608
2013-11-18 12:52:27 +01:00
Jan Synacek
3589b29979
fix: slaptest incorrectly handles 'include' directives containing a custom file
...
Resolves : #1028935
2013-11-11 11:14:20 +01:00
Jan Synacek
59d41b9111
fix: missing a linefeed at the end of file /etc/openldap/ldap.conf
...
Resolves : #1019836
2013-10-30 11:35:50 +01:00
Jan Synacek
f646d734cc
new upstream release (2.4.37)
...
Resolves : #1023916
2013-10-30 11:35:38 +01:00
Jan Synacek
4f8940365c
fix: slapd daemon fails to start with segmentation fault on s390x
...
Resolves : #1020661
2013-10-21 12:40:42 +02:00
Jan Synacek
7bbf8dc1d7
rebuilt for libdb-5.3.28
2013-10-15 15:33:16 +02:00
Jan Synacek
6de15ed197
fix: CLDAP is broken for IPv6
...
Resolves : #1018688
2013-10-14 10:08:45 +02:00
Jan Synacek
0734516c42
fix: typos in manpages
2013-09-04 12:13:16 +02:00
Jan Synacek
1524b1e957
new upstream release (2.4.36)
2013-08-20 10:35:34 +02:00
Dennis Gilmore
2999a96836
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
2013-08-03 10:40:12 -05:00
Petr Písař
98466f316a
Perl 5.18 rebuild
2013-07-17 23:33:37 +02:00
Jan Vcelak
c86ed52b94
fix typos in previous commit
2013-06-26 20:28:42 +02:00
Jan Vcelak
5265f0d549
move tmpfiles config to correct location
...
- move from /etc/tmpfiles.d to /usr/lib/tmpfiles.d
http://fedoraproject.org/wiki/Packaging:Tmpfiles.d
2013-06-24 13:22:37 +02:00
Jan Synacek
19dea679fe
fix: using slaptest to convert slapd.conf to LDIF format ignores "loglevel 0"
2013-06-14 14:32:16 +02:00
Jan Synacek
ff5c1adb2a
fix: LDAPI with GSSAPI does not work if SASL_NOCANON=on
...
Resolves : #960222
2013-05-09 09:32:52 +02:00
Jan Synacek
05278cd506
fix: lt_dlopen() with back_perl
...
Resolves : #960048
2013-05-09 09:29:28 +02:00
Jan Synacek
6e08d10adf
do not needlessly run ldconfig after installing openldap-devel
2013-05-09 09:24:02 +02:00
Jan Synacek
7516346478
remove trailing spaces
2013-04-09 13:45:32 +02:00
Jan Synacek
50ba1f03e9
set SASL_NOCANON to on by default
...
Resolves : #949864
2013-04-09 13:43:45 +02:00
Jan Synacek
a5ba090a01
fix: minor documentation fixes
2013-04-09 13:42:53 +02:00
Jan Synacek
44107bb150
drop the evolution patch
2013-04-05 09:39:17 +02:00
Jan Synacek
2f8c754907
fix: NSS related resource leak
...
Resolves : #929357
2013-04-02 13:44:32 +02:00