From d8f8a60be8c26a1148b07c2bdeaa71aefee6fc80 Mon Sep 17 00:00:00 2001 From: Howard Chu Date: Tue, 18 Dec 2018 21:59:59 +0000 Subject: [PATCH] More for privateKey tweak Leave olcTLSCertificateKey as its own attr, not a subtype --- servers/slapd/bconfig.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/servers/slapd/bconfig.c b/servers/slapd/bconfig.c index 0e51528fb0..88aa26b36a 100644 --- a/servers/slapd/bconfig.c +++ b/servers/slapd/bconfig.c @@ -796,7 +796,8 @@ static ConfigTable config_back_cf_table[] = { #endif "( OLcfgGlAt:99 NAME 'olcTLSCertificateKey' " "DESC 'X.509 privateKey, must use ;binary' " - "SUP pKCS8PrivateKey SINGLE-VALUE )", NULL, NULL }, + "EQUALITY privateKeyMatch " + "SYNTAX 1.2.840.113549.1.8.1.1 SINGLE-VALUE )", NULL, NULL }, { "TLSCertificateKeyFile", NULL, 2, 2, 0, #ifdef HAVE_TLS CFG_TLS_CERT_KEY|ARG_STRING|ARG_MAGIC, &config_tls_option,