Re: OpenSSL provider support in openldap: OSSL_STORE_open()
Graham Leggett <[email protected]> Wed, 3 Jan 2024 09:29:49 +0000
| Newsgroups | gmane.network.openldap.devel |
|---|---|
| Message-ID | <[email protected]> |
--Apple-Mail=_17987685-94C5-4E56-8377-6D71D083C0A6 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 On 19 Dec 2023, at 12:45, Graham Leggett <[email protected]> wrote: > A search in the openldap source shows we don=E2=80=99t yet support the = OpenSSL3 provider OSSL_STORE_open() call, which takes a URL as a = parameter. >=20 > I=E2=80=99m happy to patch the openldap client to support this, would = it make sense to add a LDAP_OPT_X_TLS_URL option to ldap_option_set()? Patch available here: https://bugs.openldap.org/show_bug.cgi?id=3D10149 This allows replication in 389ds to be fixed, with the patch available = here for anyone interested: https://github.com/389ds/389-ds-base/pull/6021 Regards, Graham =E2=80=94 --Apple-Mail=_17987685-94C5-4E56-8377-6D71D083C0A6 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 <html><head><meta http-equiv=3D"content-type" content=3D"text/html; = charset=3Dutf-8"></head><body style=3D"overflow-wrap: break-word; = -webkit-nbsp-mode: space; line-break: after-white-space;">On 19 Dec = 2023, at 12:45, Graham Leggett <[email protected]> = wrote:<div><br><div><blockquote type=3D"cite">A search in the openldap = source shows we don=E2=80=99t yet support the OpenSSL3 provider = OSSL_STORE_open() call, which takes a URL as a = parameter.<br><div><div><br>I=E2=80=99m happy to patch the openldap = client to support this, would it make sense to add a LDAP_OPT_X_TLS_URL = option to = ldap_option_set()?<br></div></div></blockquote><div><br></div><div>Patch = available here:</div><div><br></div><div><a = href=3D"https://bugs.openldap.org/show_bug.cgi?id=3D10149">https://bugs.op= enldap.org/show_bug.cgi?id=3D10149</a><br></div><div><br></div><div>This = allows replication in 389ds to be fixed, with the patch available here = for anyone interested:</div><div><br></div><div><a = href=3D"https://github.com/389ds/389-ds-base/pull/6021">https://github.com= /389ds/389-ds-base/pull/6021</a></div><div><br></div><div>Regards,</div><d= iv>Graham</div><div>=E2=80=94</div><div><br></div></div></div></body></htm= l>= --Apple-Mail=_17987685-94C5-4E56-8377-6D71D083C0A6--