search

389ds / 389-ds-base

The enterprise-class Open Source LDAP server for Linux
https://www.port389.org/
Other
211 stars 91 forks source link

START_TLS bug in accept_thread backport to 1.3.10 #4964

Open jchapma opened 3 years ago

jchapma commented 3 years ago

Issue Description A backport of the accept_thread to the 1.3.10 branch (rhel7.9) didn't include support for a START_TLS request

Package Version and Platform:

Steps to Reproduce

  1. Enable TLS for RHDS10
  2. Generate a START_TLS request ldapsearch -o ldif-wrap=no -xLLLZZH ldap://hostname-D "cn=dm" -w password -s base -b "" vendorversion
  3. See error: [26/Oct/2021:11:41:42.806294543 -0400] - ERR - start_tls_io_enable - SSL socket import failed.

Expected results The above command should complete with no error.

Additional context Reported by @msauton@redhat.com Initial backport commit: https://github.com/389ds/389-ds-base/issues/4944

jchapma commented 3 years ago

BZ: https://bugzilla.redhat.com/show_bug.cgi?id=2012035