Bug 669846

Summary: some server certificates refused with inadequate type error
Product: Red Hat Enterprise Linux 6 Reporter: Rich Megginson <rmeggins>
Component: openldapAssignee: Jan Vcelak <jvcelak>
Status: CLOSED ERRATA QA Contact: Ondrej Moriš <omoris>
Severity: high Docs Contact:
Priority: high    
Version: 6.1CC: dpal, jgalipea, jhrozek, jplans, jvcelak, jzeleny, omoris, rmeggins, shaines, tsmetana, yzhang
Target Milestone: rc   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: openldap-2.4.23-7.el6 Doc Type: Bug Fix
Doc Text:
- connecting to LDAP server with TLS/SSL enabled - client refuses server certificate wrongly with following error: "Certificate key usage inadequate for attempted operation" - fixed certificate validation code - openldap client will accept valid server certificates
Story Points: ---
Clone Of: 668899 Environment:
Last Closed: 2011-05-19 13:59:51 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Bug Depends On: 668899    
Bug Blocks:    

Comment 2 Jan Vcelak 2011-01-20 18:31:39 UTC
Fixed in openldap-2.4.23-7.el6

Comment 3 Jan Vcelak 2011-01-20 18:39:41 UTC
    Technical note added. If any revisions are required, please edit the "Technical Notes" field
    accordingly. All revisions will be proofread by the Engineering Content Services team.
    
    New Contents:
- connecting to LDAP server with TLS/SSL enabled
- client refuses server certificate wrongly with following error: "Certificate key usage inadequate for attempted operation"
- fixed certificate validation code
- openldap client will accept valid server certificates

Comment 6 errata-xmlrpc 2011-05-19 13:59:51 UTC
An advisory has been issued which should help the problem
described in this bug report. This report is therefore being
closed with a resolution of ERRATA. For more information
on therefore solution and/or where to find the updated files,
please follow the link below. You may reopen this bug report
if the solution does not work for you.

http://rhn.redhat.com/errata/RHBA-2011-0673.html