Heads-up: new LDAP autopkgtest using libldap and slapd in libcurl package

John Scott jscott at posteo.net
Tue Jul 25 23:02:40 BST 2023


Hi Debian LDAPpers,

This is a notice that I've discovered a series of issues in curl related to its LDAP support that stem from a root cause, so in addition to shipping the libcurl fix, I'm also adding an autopkgtest that uses a lot of goodies from the OpenLDAP package.

If the necessary Debconf questions to spin up slapd change, for example, then the test will require change too, which is one reason why I'm letting you know. The whole test is written in C, here's what it does:
 - installs slapd
 - adds an organization unit using the LDAP API
 - fetches the supposed-to-be-valid LDIF with libcurl
 - then uses the LDIF routines from libldap again to read the data, and check that the UTF-32 we stored in an attribute didn't get truncated at a null byte or otherwise treated strangely

curl has more frequent upstream releases than OpenLDAP, so I think it's the right place for the test, though it arguably uses more OpenLDAP functionality than libcurl. If anyone has any objections or if I've just piqued your curiosity, the Merge Request which might be merged soon is at https://salsa.debian.org/debian/curl/-/merge_requests/16

Thanks. I plan on doing more OpenLDAP QA work:
	- making sure gpgsm can fetch certificates from LDAP
	- checking that TLS works okay (this I hope will help the transition from GnuTLS to OpenSSL)
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 228 bytes
Desc: This is a digitally signed message part
URL: <http://alioth-lists.debian.net/pipermail/pkg-openldap-devel/attachments/20230725/c96e0e3f/attachment.sig>


More information about the Pkg-openldap-devel mailing list