[Pkg-openldap-devel] Bug#541256: TLS: could not set cipher list TLS_RSA_AES_256_CBC_SHA1

Ryan Tandy ryan at nardis.ca
Fri Aug 28 18:16:36 UTC 2015


Control: tag -1 wontfix

On Thu, Aug 13, 2009 at 03:42:56AM -0700, Steve Langasek wrote:
>If the current parser behavior is going to remain in place (which is not yet
>clear)

The changed behaviour has remained.

>then we should address this in the packaging on upgrade, either by 
>converting the TLSCipherSuite values automatically or at minimum by 
>notifying the user that an adjustment will be needed.

Unfortunately that never happened, and there was some fallout. But that 
was multiple stable releases ago, direct upgrades from versions still 
using the old syntax are no longer supported, so basically I think it's 
too late now to actually do anything worthwhile about this.

On Wed, May 11, 2011 at 03:55:55AM -0400, Simon L'nu wrote:
>*** glibc detected *** slapd: double free or corruption (top): 0x08894138 ***
>
>and slapd crashes with an abort signal.
>
>this happens when i set "oldTLSCipherSuite: ___" doesn't matter what, it crashes.

JFTR, that was filed separately (also by Simon) as #645810 and fixed.

thanks,
Ryan



More information about the Pkg-openldap-devel mailing list