Howard Chu authored Aug 21, 2020 and Quanah Gibson-Mount committed Aug 21, 2020

Add an option to specify how subjectAlternativeNames should be
handled when validating the names in a server certificate.

Isaac Boukris authored Apr 23, 2020 and Quanah Gibson-Mount committed Apr 23, 2020

Reported-by: Ryan Tandy @ryan

Add LDAP_OPT_X_SASL_CBINDING option to define the binding type to use,
defaults to "none".

Add "tls-endpoint" binding type implementing "tls-server-end-point" from
RCF 5929, which is compatible with Windows.

Fix "tls-unique" to include the prefix in the bindings as per RFC 5056.

Nadezhda Ivanova authored Feb 07, 2019 and Quanah Gibson-Mount committed Feb 28, 2019

This option instructs try_read1msg to not free the connection on read error
or on Notice of disconnections, but leave it to the caller. It is needed,
for example, by back-asyncmeta, who expects to have control on when
its target connections are freed. Must be used with caution.

Instead of loading from files.

extended ops

Basic ops except abandon and unbind; since they get no reply
it's not important for the caller to know their msgID.

Currently only implemented for OpenSSL.
Needs an option to set the criticality flag.

It was introduced for Cyrus 1.5 in 2001; we've been on 2.x since 2002 and
Cyrus does its own locking when needed.

If a timeout is set, perform the SSL Handshake using non-blocking IO.  This way
we can timeout if SSL Handshake gets stuck for whatever reason.

This code is currently hidden behind #ifdefs (LDAP_USE_NON_BLOCKING_TLS) and
disabled by default as there seem to be some problems using NON-blocking
I/O during the TLS Handshake when linking against NSS (either a bug in NSS
itself of in tls_m.c, see discussion on -devel)

This patch adds an additional parameter to ldap_int_poll() in order to indicate
if we're waiting in order to perform a read or write operation.

Frederik Deweerdt authored May 11, 2012 and Howard Chu committed May 30, 2012

Not protecting the accesses to ldap_int_hostname could lead to a double
free.

Move mutexes to end of structs, so libldap can ignore them