54f6fd1feb
NSS: Enhance OpenLDAP to support TLSv1.3 protocol with NSS
...
Resolves : #1435689
2017-03-24 20:23:40 +01:00
d0828bee6c
NSS: Rearrange ciphers-, parsing-, and protocol-related patches
...
In addition, remove (or better, do not include anymore) unused
variables *variant* and *range* that were forgotten to be
removed when landing patch openldap-nss-protocol-version-new-api.patch
in commit 9e30b98#1435689
2017-03-24 20:02:46 +01:00
8575fd0248
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
2017-02-11 00:53:32 +00:00
0cc5bf7254
NSS: Update list of ciphers
...
Resolves : #1387868
2017-01-31 15:58:28 +01:00
22dbdbf78a
NSS: Use what NSS considers default for DEFAULT cipher string.
...
Related: #1387868
2017-01-30 16:30:46 +01:00
da1f719199
NSS: fix incorrect multi-keyword parsing and support new ones
...
- add multi_mask, negative_mask, and multi_strength
+ some keywords may describe multiple cipher suite parameters at once
- fix masks decision tree
+ all masks have to fit the cipher suite to include it
- correct 'action' evaluation
+ plus sign means ordering (which NSS does not support)
+ no sign presence means adding implicitly
- extend keywords for new future ciphers
Backporting: #1372349
Resolves : #1243517
2017-01-29 19:46:00 +01:00
45704219c4
fix previous commit
...
Related: #1375432
2017-01-23 14:03:38 +01:00
9e30b985ea
Setting olcTLSProtocolMin does not change supported protocols
...
Resolves : #1375432
2017-01-20 14:41:25 +01:00
17f248ddeb
slapd should start after network-online.service
...
Resolves : #1336487
2016-10-14 18:44:55 +02:00
31ea2073c9
Mandatory Perl build-requires added < https://fedoraproject.org/wiki/Changes/Build_Root_Without_Perl >
2016-06-24 09:22:43 +02:00
0087c276cd
Perl 5.24 rebuild
2016-05-15 06:06:55 +02:00
ebc63b919d
Update to 2.4.44
...
Resolves : #1305191
2016-05-11 18:29:31 +02:00
a0c7cda8b5
Bring back *.la files in %{_libdir}/openldap/
...
Related: #1331484
2016-05-03 19:12:27 +02:00
ace19e3e36
Keep *.so libraries in %{_libdir}/openldap/
...
Resolves : #1331484
2016-04-28 17:43:08 +02:00
8291cbaa23
Include AllOp overlay
...
Resolves : #1319782
2016-04-27 09:58:29 +02:00
eb29790db6
Ensure all libtool archive files are removed (.la)
2016-04-10 23:43:12 +01:00
65a5310ab6
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
2016-02-04 11:29:03 +00:00
ab9a93cce4
New upstream release 2.4.43
...
Resolves : #1253871
2016-01-21 16:40:54 +01:00
0f227076e4
New upstream release 2.4.41
...
Resolves : #1238251
2015-07-16 10:51:37 +02:00
58ea27bc6e
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
2015-06-17 23:59:36 +00:00
d22738532e
Perl 5.22 rebuild
2015-06-03 14:49:21 +02:00
443ffdd194
fix: bring back tmpfiles config ( #1215655 )
...
This reverts commit 521bbc2942
2015-04-27 15:20:45 +02:00
6e2cf23fa6
remove spurious ghosted file
2015-03-30 10:35:43 +02:00
592250ebfb
link against moznss again ( #1187742 )
...
Revert "link against openssl by default"
This reverts commit 72da77adb6
2015-02-20 11:06:24 +01:00
1fb41f2a59
fix: Unknown Berkeley DB major version in db.h ( #1191098 )
2015-02-11 10:52:43 +01:00
5a45ad5a72
CVE-2015-1545: slapd crashes on search with deref control ( #1190645 )
2015-02-10 09:33:10 +01:00
b730f13ce0
simplify package even more by removing certificate generation
...
Creating self-signed certificates for localhost is pointless. If anyone
uses TLS, they probably have their own. Testers can generate their own
as well, the package does't have to be plagued by scripts just because
of that.
2015-01-27 15:25:04 +01:00
72da77adb6
link against openssl by default
...
This is not an enhancement, this is a bugfix.
2015-01-27 15:19:00 +01:00
ee4af28583
simplify checking for missing server configuration
2015-01-26 14:24:55 +01:00
e143df31ee
fix invalid ldif introduced in 9a79680
2015-01-26 13:33:14 +01:00
521bbc2942
remove tmpfiles config since it's no longer needed
2015-01-26 13:31:31 +01:00
0fc0a68e34
renumber patches and sources
2015-01-21 14:24:49 +01:00
9a796804cd
remove pid file and args file
...
We have systemd for that.
2015-01-21 14:12:31 +01:00
b724454515
make mdb default after a new installation
2015-01-21 14:10:09 +01:00
7a8ba10b72
remove unneeded configure flags, disable sql backend and aci
...
Both SQL backend and ACI are experimental. SQL is unsupported.
2015-01-19 09:45:07 +01:00
41c84187a9
remove old F17 hack
2015-01-16 12:23:49 +01:00
c3de3dd938
remove openldap-syncrepl-unset-tls-options.patch
...
Unaccepted upstream, not an issue, documented in the man pages.
2015-01-16 10:28:54 +01:00
2594744e83
remove openldap-userconfig-setgid.patch
...
Pointless Fedora specific patch.
2015-01-16 10:27:49 +01:00
c1bd7d8503
remove openldap-ldaprc-currentdir.patch
...
The upstream ITS has been fixed a long time ago and this patch is Fedora
specific and pointless.
2015-01-16 10:08:38 +01:00
f1bc6682b9
remove openldap-fedora-systemd.patch
...
We don't use env variables anymore.
2015-01-16 09:08:08 +01:00
0625d0e501
provide an unversioned symlink to check_password.so.1.1
...
So the users don't have to specify the exact version in their configuration.
2014-12-17 15:32:22 +01:00
4840f8de8e
improve check_password
...
Fix Makefile to accept provided CFLAGS and LDFLAGS. Patch the code a bit.
2014-12-17 15:27:30 +01:00
098f3b5fe6
harden the build
2014-12-17 09:21:38 +01:00
40aff41da5
fix changelog after the revert
2014-12-17 09:21:02 +01:00
48c6d060f6
Revert "enhancement: generate openldap.pc ( #1171493 )"
...
This reverts commit 79a0b58108
2014-12-16 09:52:29 +01:00
79a0b58108
enhancement: generate openldap.pc ( #1171493 )
2014-12-09 12:34:25 +01:00
4b2abac9db
enhancement: support TLSv1 and later ( #1160466 )
2014-11-14 09:54:11 +01:00
90f2044e56
Merge branch 'master' into f21
...
Let's keep the history linear...
Conflicts:
openldap.spec
2014-10-06 10:24:40 +02:00
2c331b7581
new upstream release (2.4.40)
...
Resolves : #1147877
2014-09-30 13:44:19 +02:00
3363e7a6da
Perl 5.20 rebuild
2014-08-27 11:12:00 +02:00
Matúš Honěk
Fedora Release Engineering
Petr Písař
Jitka Plesnikova
Peter Robinson
Dennis Gilmore
Jan Synacek