Howard Chu authored 12 years ago and Quanah Gibson-Mount committed 12 years ago

This reverts commit 9e3af235.

Jan Vcelak authored 12 years ago and Quanah Gibson-Mount committed 12 years ago

The buffer allocated for reading password file has to be initialized
with zeros, or we need to append zero at the end of the file. Otherwise
we might read unitialized memory and consider it to be a password.

SATOH Fumiyasu authored 12 years ago and Quanah Gibson-Mount committed 12 years ago

Add "-o module-path=<pathspec>" and "-o module-load=<filename>"
options to load a dynamically loadable password hash module
(e.g., slapd-sha2).

Jan Vcelak authored 12 years ago and Quanah Gibson-Mount committed 12 years ago

Prior to this patch, if TLS_CACERTDIR was set to Mozilla NSS certificate
database and TLS_CACERT was set to a PEM bundle file with CA
certificates, the PEM file content was not loaded.

With this patch and the same settings, OpenLDAP can verify certificates
which are signed by CAs stored both in certdb and PEM bundle file.