Back to bug 811468

Who When What Removed Added
David Spurek 2012-04-11 08:07:00 UTC Version 6.4 6.3
Jan Vcelak 2012-07-16 13:28:59 UTC Status NEW CLOSED
Resolution --- CURRENTRELEASE
Last Closed 2012-07-16 09:28:59 UTC
Ondrej Moriš 2012-08-04 10:43:39 UTC Status CLOSED ASSIGNED
Resolution CURRENTRELEASE ---
Keywords Reopened
Jakub Hrozek 2012-08-04 18:50:09 UTC CC jhrozek
Jan Vcelak 2012-08-29 14:47:47 UTC Summary libldap ignores a directory of CA certificates if any of them can't be read not all certificates in OpenSSL compatible CA certificate directory format are loaded
Jan Vcelak 2012-09-25 16:10:26 UTC Status ASSIGNED MODIFIED
Fixed In Version openldap-2.4.23-29.el6
errata-xmlrpc 2012-09-25 16:18:20 UTC Status MODIFIED ON_QA
Jan Vcelak 2012-09-26 15:49:54 UTC Doc Text Cause:
OpenSSL hashed CA certificate directory is configured to be used as a source for trusted CA certificates. libldap assumes that filenames of all hashed certificates should end with '.0' which is not correct. Any numeric suffix is allowed.

Consequence:
Only certificates with '.0' suffix are loaded.

Fix:
Patch applied which updates checking of filenames of files in OpenSSL CA certificate directory.

Result:
All certificates with a filename, which is allowed in hashed OpenSSL CA certificate directory are loaded.
David Spurek 2012-10-09 07:32:15 UTC QA Contact qe-baseos-security dspurek
errata-xmlrpc 2012-11-15 07:16:59 UTC Status ON_QA VERIFIED
errata-xmlrpc 2013-02-07 00:50:31 UTC Status VERIFIED RELEASE_PENDING
errata-xmlrpc 2013-02-21 09:45:35 UTC Status RELEASE_PENDING CLOSED
Resolution --- ERRATA
Last Closed 2012-07-16 09:28:59 UTC 2013-02-21 04:45:35 UTC
Simon Green 2013-03-04 01:30:00 UTC CC tsmetana
John Skeoch 2015-03-02 05:26:48 UTC CC ebenes

Back to bug 811468