Bug 852338

Summary:	some TLS ciphers cannot be enabled
Product:	[Fedora] Fedora	Reporter:	Jan Vcelak <jvcelak>
Component:	openldap	Assignee:	Jan Vcelak <jvcelak>
Status:	CLOSED ERRATA	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	17	CC:	jsynacek, jvcelak, rmeggins, tsmetana
Target Milestone:	---
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:	openldap-2.4.32-3.fc17	Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:
Clones:	852339 (view as bug list)		Environment:
Last Closed:	2012-12-20 15:21:14 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	852339

Description Jan Vcelak 2012-08-28 08:39:26 UTC

Description of problem:

The list of ciphers in OpenLDAP with MozNSS backend is incomplete. Therefore, some ciphers cannot be enabled.


Version-Release number of selected component (if applicable):
openldap-2.4.32-2.fc17


How reproducible:
always


Steps to Reproduce:
1. LDAPTLS_CIPHER_SUITE=CAMELLIA ldapsearch -x ldaps://server
2.
3.

  
Actual results:
ldap_start_tls: Connect error (-11)


Expected results:
successfully connected


Additional info:

I already submitted a patch for this upstream:
http://www.openldap.org/its/index.cgi?findid=7367

Comment 1 Fedora Update System 2012-09-19 09:11:28 UTC

openldap-2.4.32-3.fc17 has been submitted as an update for Fedora 17.
https://admin.fedoraproject.org/updates/openldap-2.4.32-3.fc17

Comment 2 Fedora Update System 2012-09-19 09:13:03 UTC

openldap-2.4.32-3.fc18 has been submitted as an update for Fedora 18.
https://admin.fedoraproject.org/updates/openldap-2.4.32-3.fc18

Comment 3 Fedora Update System 2012-09-20 05:58:03 UTC

Package openldap-2.4.32-3.fc18:
* should fix your issue,
* was pushed to the Fedora 18 testing repository,
* should be available at your local mirror within two days.
Update it with:
# su -c 'yum update --enablerepo=updates-testing openldap-2.4.32-3.fc18'
as soon as you are able to.
Please go to the following url:
https://admin.fedoraproject.org/updates/FEDORA-2012-14390/openldap-2.4.32-3.fc18
then log in and leave karma (feedback).

Comment 4 Fedora Update System 2012-10-08 02:24:16 UTC

openldap-2.4.32-3.fc17 has been pushed to the Fedora 17 stable repository.  If problems still persist, please make note of it in this bug report.

Comment 5 Fedora Update System 2012-12-20 15:21:17 UTC

openldap-2.4.32-3.fc18 has been pushed to the Fedora 18 stable repository.  If problems still persist, please make note of it in this bug report.