Bug 1310069

Summary: ldap_install_tls reports TLS was established even after a socket timeout
Product: Red Hat Enterprise Linux 7 Reporter: Jakub Hrozek <jhrozek>
Component: openldapAssignee: Matus Honek <mhonek>
Status: CLOSED WONTFIX QA Contact: BaseOS QE Security Team <qe-baseos-security>
Severity: low Docs Contact:
Priority: low    
Version: 7.3CC: lslebodn, mmarusic, nkinder, pkis
Target Milestone: rc   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of:
: 1395289 (view as bug list) Environment:
Last Closed: 2018-08-04 16:48:11 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 1283798    
Attachments:
Description Flags
a reproducer none

Description Jakub Hrozek 2016-02-19 11:32:41 UTC
Created attachment 1128516 [details]
a reproducer

Description of problem:
When there is an LDAP server listening on ldaps:// but the connection attempt is not successfull and interrupted with LDAP_OPT_X_TLS_CONNECT_CB, ldap_install_tls still returns LOCAL_ERROR which indicates the connection was established.

Version-Release number of selected component (if applicable):


How reproducible:


Steps to Reproduce:
please see the attached C reproducer.

Actual results:


Expected results:


Additional info:
this happens with both NSS and OpenSSL as crypto back ends.