[Git][openldap-team/openldap][upstream] 43 commits: Return to release-engineering for 2.4.52

Ryan Tandy gitlab at salsa.debian.org
Mon Sep 7 19:03:50 BST 2020 


Ryan Tandy pushed to branch upstream at Debian OpenLDAP Maintainers / openldap


Commits:
53d0351e by Quanah Gibson-Mount at 2020-08-12T05:02:55+00:00
Return to release-engineering for 2.4.52

- - - - -
2d8d526a by Howard Chu at 2020-08-21T22:03:42+00:00
ITS#7595 more for LDAP_OPT_X_TLS_ECNAME

Update ldap_get_option(3) for LDAP_OPT_X_TLS_ECNAME

- - - - -
aacec4c8 by Howard Chu at 2020-08-21T22:21:43+00:00
ITS#9054 Add support for multiple EECDH curves

Requires OpenSSL 1.0.2 or newer

- - - - -
730ba65e by Howard Chu at 2020-08-21T22:43:47+00:00
ITS#9318 add TLS_REQSAN option

Add an option to specify how subjectAlternativeNames should be
handled when validating the names in a server certificate.

- - - - -
a9f42b12 by Howard Chu at 2020-08-21T23:02:11+00:00
ITS#9054, #9318 add new TLS options to slapd bindconf

For use with back-ldap/back-meta/syncrepl/etc

- - - - -
df5c46ba by Quanah Gibson-Mount at 2020-08-24T15:18:20+00:00
ITS#9318, ITS#9054

- - - - -
276f0e9c by Howard Chu at 2020-08-24T16:11:58+00:00
ITS#9324 syncrepl: don't wait forever in Refresh mode

Just poll for available data, same as Persist mode.
Clarify retry/return states from do_syncrep2

- - - - -
706dea24 by Quanah Gibson-Mount at 2020-08-25T20:08:26+00:00
ITS#9324

- - - - -
29924112 by Howard Chu at 2020-08-25T21:53:22+00:00
ITS#9329 syncrepl: fix regression from ITS#9282

- - - - -
a6805505 by Quanah Gibson-Mount at 2020-08-25T21:54:17+00:00
ITS#9329

- - - - -
d0f6b606 by Howard Chu at 2020-08-26T15:01:51+00:00
ITS#9249 librewrite: fix malloc/free corruption

If substitution parsing fails, would attempt to free a mapping
that hadn't been allocated yet.

Also, on failure, caller in saslauthz would attempt to free a
rwinfo struct that hadn't been allocated.

- - - - -
3afca8f5 by Quanah Gibson-Mount at 2020-08-26T15:02:53+00:00
ITS#9249

- - - - -
ae9d44f7 by Howard Chu at 2020-08-26T20:57:52+00:00
ITS#9329 Re-fix merge_state

A bit uglier but more straightforward.

- - - - -
1c7a4f1e by Quanah Gibson-Mount at 2020-08-26T21:28:48+00:00
Fix missing getopt check for the argument "N"

- - - - -
ec5eba53 by Howard Chu at 2020-08-26T21:38:17+00:00
ITS#9328 cldap: check for error on connected socket

libldap doesn't use a connected socket for UDP sessions, but 3rd
parties can, passed in with ldap_init_fd().

- - - - -
06ab4743 by Quanah Gibson-Mount at 2020-08-26T21:39:01+00:00
ITS#9328

- - - - -
d2139d5c by Howard Chu at 2020-08-27T15:05:46+00:00
ITS#9054 fix typo

- - - - -
d7fd65da by Quanah Gibson-Mount at 2020-08-27T15:17:04+00:00
ITS#9282 - Fix hard coded backend

- - - - -
ce6d302c by Howard Chu at 2020-08-28T01:30:53+00:00
ITS#9135 fix index error on collapsed range

- - - - -
fa6d19d4 by Quanah Gibson-Mount at 2020-08-28T01:31:14+00:00
ITS#9135

- - - - -
cfc231a5 by Howard Chu at 2020-08-28T15:27:59+00:00
ITS#9054, #9318 document new TLS options in slapd

- - - - -
ab6e70c2 by Quanah Gibson-Mount at 2020-08-28T16:10:00+00:00
Prep for release (2.4.52)

- - - - -
b6114948 by Quanah Gibson-Mount at 2020-08-28T17:46:27+00:00
Return to release engineering

- - - - -
3f98e839 by Quanah Gibson-Mount at 2020-08-31T17:32:04+00:00
Update to require OpenSSL 1.0.2 or later

- - - - -
1b85e3a7 by Quanah Gibson-Mount at 2020-08-31T19:33:16+00:00
Regenerate for ITS#9323 require openssl 1.0.2 or later

- - - - -
5162d388 by Quanah Gibson-Mount at 2020-08-31T19:33:56+00:00
ITS#9323 - require openssl 1.0.2 or later

- - - - -
03eba9cd by Howard Chu at 2020-08-31T19:59:21+00:00
ITS#9282 fix crash in nonpresent_callback

In a standard Refresh present phase, the provider sends no cookie
since it is only listing the entries that existed as of the time
in the cookie the consumer sent. In this case the consumer only
needs to check entryCSNs against its last sent cookie.

- - - - -
fc0a035e by Howard Chu at 2020-08-31T20:00:48+00:00
ITS#9282 more for merge_state

Don't assume si_cookieState is always newer

- - - - -
91a75bd8 by Quanah Gibson-Mount at 2020-08-31T20:02:16+00:00
ITS#9282

- - - - -
5f2b1e0b by Howard Chu at 2020-09-01T20:21:22+01:00
ITS#9332 add placeholder in LDAP_LDO_TLS_NULLARG

- - - - -
04263407 by Quanah Gibson-Mount at 2020-09-01T19:46:03+00:00
ITS#9332

- - - - -
9f8a408c by Ondřej Kuzník at 2020-09-02T18:53:34+00:00
ITS#9282 Extend test to cover the second issue fixed

- - - - -
e6aa83bf by Quanah Gibson-Mount at 2020-09-02T19:23:15+00:00
Revert "ITS#9282 Extend test to cover the second issue fixed"

This reverts commit 9f8a408c769067157f78bb8c2c932207afac1e1e.

It unfortunately relies on logging only available in 2.5 and later.

- - - - -
af58686a by Howard Chu at 2020-09-03T21:46:16+00:00
ITS#9334 slapo-ppolicy re-fix ITS#9302

The mutex_lock was being skipped in the lockout case,
but still calling mutex_unlock at the end.

- - - - -
19e84112 by Quanah Gibson-Mount at 2020-09-03T21:46:58+00:00
ITS#9302, ITS#9334

- - - - -
ef3c62e7 by Ondřej Kuzník at 2020-09-03T23:11:41+00:00
ITS#9043 Improve replication loggging

- - - - -
73085ff0 by Quanah Gibson-Mount at 2020-09-04T13:45:47+00:00
ITS#9043

- - - - -
30778bda by Howard Chu at 2020-09-04T20:52:26+00:00
ITS#9338 syncrepl: Don't reuse existing connection on Refresh fallback

- - - - -
ceb632b0 by Howard Chu at 2020-09-04T20:52:34+00:00
ITS#9338 Add backlog control for testing slapd write waits

- - - - -
f6637f27 by Howard Chu at 2020-09-04T20:52:38+00:00
ITS#9338 add regression test

- - - - -
e899020e by Quanah Gibson-Mount at 2020-09-04T22:14:04+00:00
ITS#9338

- - - - -
fa674c2a by Quanah Gibson-Mount at 2020-09-07T15:13:36+00:00
Prep for release (2.4.53)

- - - - -
ee20dbd1 by Ryan Tandy at 2020-09-07T09:42:53-07:00
New upstream version 2.4.53+dfsg
- - - - -


30 changed files:

- CHANGES
- build/version.var
- clients/tools/common.c
- clients/tools/common.h
- clients/tools/ldapsearch.c
- configure
- configure.in
- doc/guide/admin/appendix-recommended-versions.sdf
- doc/guide/admin/guide.html
- doc/man/man3/ldap_get_option.3
- doc/man/man5/ldap.conf.5
- doc/man/man5/slapd-config.5
- doc/man/man5/slapd-ldap.5
- doc/man/man5/slapd-meta.5
- doc/man/man5/slapd.conf.5
- include/ldap.h
- libraries/libldap/init.c
- libraries/libldap/ldap-int.h
- libraries/libldap/result.c
- libraries/libldap/tls2.c
- libraries/libldap/tls_g.c
- libraries/libldap/tls_o.c
- libraries/librewrite/subst.c
- servers/slapd/back-mdb/idl.c
- servers/slapd/config.c
- servers/slapd/ctxcsn.c
- servers/slapd/overlays/ppolicy.c
- servers/slapd/overlays/syncprov.c
- servers/slapd/slap.h
- servers/slapd/syncrepl.c


View it on GitLab: https://salsa.debian.org/openldap-team/openldap/-/compare/3fca5713c8e290ced69cd12224c91ae92ed6d360...ee20dbd1852b91b38da23dde6dafe5dd50fd40b3

-- 
View it on GitLab: https://salsa.debian.org/openldap-team/openldap/-/compare/3fca5713c8e290ced69cd12224c91ae92ed6d360...ee20dbd1852b91b38da23dde6dafe5dd50fd40b3
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-openldap-devel/attachments/20200907/6219e7ff/attachment-0001.html>

More information about the Pkg-openldap-devel mailing list