[Pkg-openldap-devel] Bug#861838: long list of acceptable CA names breaks libldap

Ryan Tandy ryan at nardis.ca
Sat May 6 22:58:05 UTC 2017


Control: tag -1 fixed-upstream

Hi Matthew,

I have committed a fix for this to upstream git. Could I ask you to test 
it? You just need to rebuild libldap on a client machine with the patch, 
not a server (but you do need to reconfigure the server to send the long 
CA list again). I can prepare patched packages for you if that would 
help.

http://www.openldap.org/devel/gitweb.cgi?p=openldap.git;a=commitdiff;h=7b5181da8cdd47a13041f9ee36fa9590a0fa6e48

I'd still be interested to know how you got into that state. Your last 
comments sounded like it was unintentional. If you can share a config 
that reproduces it, that would be great. I'd like to determine whether 
it's an upstream bug or RHEL/CentOS specific.

Thanks!



More information about the Pkg-openldap-devel mailing list