Bug 602040
| Summary: | Use mozilla NSS for crypto - expose LDIF API | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | Rich Megginson <rmeggins> | ||||||||
| Component: | openldap | Assignee: | Jan Zeleny <jzeleny> | ||||||||
| Status: | CLOSED RAWHIDE | QA Contact: | Fedora Extras Quality Assurance <extras-qa> | ||||||||
| Severity: | medium | Docs Contact: | |||||||||
| Priority: | low | ||||||||||
| Version: | rawhide | CC: | dpal, jzeleny, rrelyea, shaines | ||||||||
| Target Milestone: | --- | ||||||||||
| Target Release: | --- | ||||||||||
| Hardware: | All | ||||||||||
| OS: | Linux | ||||||||||
| Whiteboard: | |||||||||||
| Fixed In Version: | Doc Type: | Bug Fix | |||||||||
| Doc Text: | Story Points: | --- | |||||||||
| Clone Of: | Environment: | ||||||||||
| Last Closed: | 2010-06-28 15:31:53 UTC | Type: | --- | ||||||||
| Regression: | --- | Mount Type: | --- | ||||||||
| Documentation: | --- | CRM: | |||||||||
| Verified Versions: | Category: | --- | |||||||||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||||||
| Cloudforms Team: | --- | Target Upstream Version: | |||||||||
| Embargoed: | |||||||||||
| Attachments: |
|
||||||||||
Created attachment 422407 [details]
patch to export libldif for public use
Created attachment 422408 [details]
patches to spec file to build with mozilla nss and ldif support
These patches build in mock for rawhide (fedora 14). I've successfully tested these with 389-ds-base on rawhide. Any idea when this can land in rawhide? I've applied the patches to rawhide, feel free to test them. I'm closing this bug. |
Created attachment 422406 [details] patch to export ldif.h to the public api openldap 2.4.22 has support for using Mozilla NSS for crypto and for allowing clients to use the LDIF API. We need to enable these by default. The Mozilla NSS support includes support for existing openssl based TLS/SSL configuration and PEM cert and key files, so existing apps should just work seamlessly and should not even know that the crypto has been switched from openssl to Mozilla NSS.