Commit Graph

537 Commits

Author SHA1 Message Date
Matúš Honěk
0cc5bf7254 NSS: Update list of ciphers
Resolves: #1387868
2017-01-31 15:58:28 +01:00
Matúš Honěk
22dbdbf78a NSS: Use what NSS considers default for DEFAULT cipher string.
Related: #1387868
2017-01-30 16:30:46 +01:00
Matúš Honěk
da1f719199 NSS: fix incorrect multi-keyword parsing and support new ones
- add multi_mask, negative_mask, and multi_strength
  + some keywords may describe multiple cipher suite parameters at once
- fix masks decision tree
  + all masks have to fit the cipher suite to include it
- correct 'action' evaluation
  + plus sign means ordering (which NSS does not support)
  + no sign presence means adding implicitly
- extend keywords for new future ciphers

Backporting: #1372349
Resolves: #1243517
2017-01-29 19:46:00 +01:00
Matúš Honěk
45704219c4 fix previous commit
Related: #1375432
2017-01-23 14:03:38 +01:00
Matúš Honěk
9e30b985ea Setting olcTLSProtocolMin does not change supported protocols
Resolves: #1375432
2017-01-20 14:41:25 +01:00
Matúš Honěk
17f248ddeb slapd should start after network-online.service
Resolves: #1336487
2016-10-14 18:44:55 +02:00
Petr Písař
31ea2073c9 Mandatory Perl build-requires added <https://fedoraproject.org/wiki/Changes/Build_Root_Without_Perl> 2016-06-24 09:22:43 +02:00
Jitka Plesnikova
0087c276cd Perl 5.24 rebuild 2016-05-15 06:06:55 +02:00
Matúš Honěk
ebc63b919d Update to 2.4.44
Resolves: #1305191
2016-05-11 18:29:31 +02:00
Matúš Honěk
a0c7cda8b5 Bring back *.la files in %{_libdir}/openldap/
Related: #1331484
2016-05-03 19:12:27 +02:00
Matúš Honěk
ace19e3e36 Keep *.so libraries in %{_libdir}/openldap/
Resolves: #1331484
2016-04-28 17:43:08 +02:00
Matúš Honěk
8291cbaa23 Include AllOp overlay
Resolves: #1319782
2016-04-27 09:58:29 +02:00
Peter Robinson
eb29790db6 Ensure all libtool archive files are removed (.la) 2016-04-10 23:43:12 +01:00
Fedora Release Engineering
65a5310ab6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild 2016-02-04 11:29:03 +00:00
Matúš Honěk
ab9a93cce4 New upstream release 2.4.43
Resolves: #1253871
2016-01-21 16:40:54 +01:00
Matúš Honěk
0f227076e4 New upstream release 2.4.41
Resolves: #1238251
2015-07-16 10:51:37 +02:00
Dennis Gilmore
58ea27bc6e - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild 2015-06-17 23:59:36 +00:00
Jitka Plesnikova
d22738532e Perl 5.22 rebuild 2015-06-03 14:49:21 +02:00
Jan Synacek
443ffdd194 fix: bring back tmpfiles config (#1215655)
This reverts commit 521bbc2942.
2015-04-27 15:20:45 +02:00
Jan Synacek
6e2cf23fa6 remove spurious ghosted file 2015-03-30 10:35:43 +02:00
Jan Synacek
592250ebfb link against moznss again (#1187742)
Revert "link against openssl by default"

This reverts commit 72da77adb6.
2015-02-20 11:06:24 +01:00
Jan Synacek
1fb41f2a59 fix: Unknown Berkeley DB major version in db.h (#1191098) 2015-02-11 10:52:43 +01:00
Jan Synacek
5a45ad5a72 CVE-2015-1545: slapd crashes on search with deref control (#1190645) 2015-02-10 09:33:10 +01:00
Jan Synacek
b730f13ce0 simplify package even more by removing certificate generation
Creating self-signed certificates for localhost is pointless. If anyone
uses TLS, they probably have their own. Testers can generate their own
as well, the package does't have to be plagued by scripts just because
of that.
2015-01-27 15:25:04 +01:00
Jan Synacek
72da77adb6 link against openssl by default
This is not an enhancement, this is a bugfix.
2015-01-27 15:19:00 +01:00
Jan Synacek
ee4af28583 simplify checking for missing server configuration 2015-01-26 14:24:55 +01:00
Jan Synacek
e143df31ee fix invalid ldif introduced in 9a79680 2015-01-26 13:33:14 +01:00
Jan Synacek
521bbc2942 remove tmpfiles config since it's no longer needed 2015-01-26 13:31:31 +01:00
Jan Synacek
0fc0a68e34 renumber patches and sources 2015-01-21 14:24:49 +01:00
Jan Synacek
9a796804cd remove pid file and args file
We have systemd for that.
2015-01-21 14:12:31 +01:00
Jan Synacek
b724454515 make mdb default after a new installation 2015-01-21 14:10:09 +01:00
Jan Synacek
7a8ba10b72 remove unneeded configure flags, disable sql backend and aci
Both SQL backend and ACI are experimental. SQL is unsupported.
2015-01-19 09:45:07 +01:00
Jan Synacek
41c84187a9 remove old F17 hack 2015-01-16 12:23:49 +01:00
Jan Synacek
c3de3dd938 remove openldap-syncrepl-unset-tls-options.patch
Unaccepted upstream, not an issue, documented in the man pages.
2015-01-16 10:28:54 +01:00
Jan Synacek
2594744e83 remove openldap-userconfig-setgid.patch
Pointless Fedora specific patch.
2015-01-16 10:27:49 +01:00
Jan Synacek
c1bd7d8503 remove openldap-ldaprc-currentdir.patch
The upstream ITS has been fixed a long time ago and this patch is Fedora
specific and pointless.
2015-01-16 10:08:38 +01:00
Jan Synacek
f1bc6682b9 remove openldap-fedora-systemd.patch
We don't use env variables anymore.
2015-01-16 09:08:08 +01:00
Jan Synacek
0625d0e501 provide an unversioned symlink to check_password.so.1.1
So the users don't have to specify the exact version in their configuration.
2014-12-17 15:32:22 +01:00
Jan Synacek
4840f8de8e improve check_password
Fix Makefile to accept provided CFLAGS and LDFLAGS. Patch the code a bit.
2014-12-17 15:27:30 +01:00
Jan Synacek
098f3b5fe6 harden the build 2014-12-17 09:21:38 +01:00
Jan Synacek
40aff41da5 fix changelog after the revert 2014-12-17 09:21:02 +01:00
Jan Synacek
48c6d060f6 Revert "enhancement: generate openldap.pc (#1171493)"
This reverts commit 79a0b58108.
2014-12-16 09:52:29 +01:00
Jan Synacek
79a0b58108 enhancement: generate openldap.pc (#1171493) 2014-12-09 12:34:25 +01:00
Jan Synacek
4b2abac9db enhancement: support TLSv1 and later (#1160466) 2014-11-14 09:54:11 +01:00
Jan Synacek
90f2044e56 Merge branch 'master' into f21
Let's keep the history linear...

Conflicts:
	openldap.spec
2014-10-06 10:24:40 +02:00
Jan Synacek
2c331b7581 new upstream release (2.4.40)
Resolves: #1147877
2014-09-30 13:44:19 +02:00
Jitka Plesnikova
3363e7a6da Perl 5.20 rebuild 2014-08-27 11:12:00 +02:00
Peter Robinson
29e31a847d - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild 2014-08-17 13:55:33 +00:00
Peter Robinson
330a8ceaa7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild 2014-08-17 13:55:22 +00:00
Tom Callaway
c64abcbb2f fix license handling 2014-07-18 19:24:48 -04:00