A dotted number is not accepted for TLSProtocolMin, e.g.,
TLSProtocolMin 3.0
However, it seems is should be, hence below is a patch: when looking
for a number, make sure that not just the first character is a
digit, but the entire string can be parsed as such.
Note: IMHO this might not be the right fix, but "it works". The
right fix might be to check for ARG_INT before trying to parse it
as an integer. But that's too much of a change and I'm not that
familiar with the code.
Index: bconfig.c
===================================================================
retrieving revision 1.3
diff -u -r1.3 bconfig.c
--- bconfig.c 5 Oct 2009 16:22:10 -0000 1.3
+++ bconfig.c 7 Oct 2009 21:45:28 -0000
@@ -3626,13 +3626,8 @@
}
ch_free( c->value_string );
c->cleanup = config_tls_cleanup;
- if ( isdigit( (unsigned char)c->argv[1][0] ) ) {
- if ( lutil_atoi( &i, c->argv[1] ) != 0 ) {
- Debug(LDAP_DEBUG_ANY, "%s: "
- "unable to parse %s \"%s\"\n",
- c->log, c->argv[0], c->argv[1] );
- return 1;
- }
+ if ( isdigit( (unsigned char)c->argv[1][0] ) &&
+ lutil_atoi( &i, c->argv[1] ) == 0 ) {
return(ldap_pvt_tls_set_option(slap_tls_ld, flag, &i));
} else {
return(ldap_int_tls_config(slap_tls_ld, flag, c->argv[1]));
lmpx.com only provides a reader for public news (NNTP) servers. It is not
affiliated with the servers or forums shown here and is not responsible for
the content of articles, which is written by their respective authors.