Bugzilla will be upgraded to version 5.0. The upgrade date is tentatively scheduled for 2 December 2018, pending final testing and feedback.
Bug 788723 - TLS not working with latest openldap
TLS not working with latest openldap
Status: CLOSED ERRATA
Product: Red Hat Enterprise Linux 6
Classification: Red Hat
Component: 389-ds-base (Show other bugs)
6.3
Unspecified Unspecified
unspecified Severity unspecified
: rc
: ---
Assigned To: Rich Megginson
IDM QE LIST
:
Depends On:
Blocks: 859216
  Show dependency treegraph
 
Reported: 2012-02-08 17:01 EST by Rich Megginson
Modified: 2012-09-20 15:54 EDT (History)
3 users (show)

See Also:
Fixed In Version: 389-ds-base-1.2.10.2-1.el6
Doc Type: Bug Fix
Doc Text:
This is not a bug a customer could run into. This was fixed upstream and we wanted to track it.
Story Points: ---
Clone Of:
: 859216 (view as bug list)
Environment:
Last Closed: 2012-06-20 03:13:21 EDT
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
CRM:
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---


Attachments (Terms of Use)


External Trackers
Tracker ID Priority Status Summary Last Updated
Red Hat Product Errata RHSA-2012:0813 normal SHIPPED_LIVE Low: 389-ds-base security, bug fix, and enhancement update 2012-06-19 15:29:15 EDT

  None (edit)
Description Rich Megginson 2012-02-08 17:01:19 EST
This bug is created as a clone of upstream ticket:
https://fedorahosted.org/389/ticket/281

We are doing TLS configuration incorrectly in the 389 project.  The proper way to do it is to use ldap_set_option(ld,...) to set the TLS options such as certdir, cert, key, etc. first, then use ldap_set_option(ld, LDAP_OPT_X_TLS_NEWCTX, &val) last, to tell openldap to create and init a new TLS context with the given configuration.
Comment 3 Jenny Galipeau 2012-02-14 10:16:17 EST
Please add steps to verify/reproduce this issue
Comment 5 Rich Megginson 2012-04-16 12:33:34 EDT
(In reply to comment #3)
> Please add steps to verify/reproduce this issue

Just verify no regressions in any acceptance, long duration, etc. test that uses TLS/SSL.
Comment 6 Amita Sharma 2012-05-24 05:13:47 EDT
I dn't see any particular regressions.
Hence marking as VERIFIED.
Comment 7 Rich Megginson 2012-05-24 19:16:05 EDT
    Technical note added. If any revisions are required, please edit the "Technical Notes" field
    accordingly. All revisions will be proofread by the Engineering Content Services team.
    
    New Contents:
This is not a bug a customer could run into.  This was fixed upstream and we wanted to track it.
Comment 8 errata-xmlrpc 2012-06-20 03:13:21 EDT
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

http://rhn.redhat.com/errata/RHSA-2012-0813.html

Note You need to log in before you can comment on or make changes to this bug.