Quanah Gibson-Mount
eae9c380d0
Merge remote-tracking branch 'origin/mdb.RE/0.9'
2025-09-17 17:39:20 +00:00
Caolán McNamara
f584da2fe7
ITS#10375 libldap/tls2: const up oids
...
to move it out of the .data section
2025-07-28 15:19:04 +01:00
Howard Chu
7d2805f27c
ITS#10370 libldap: don't assert on network input
2025-07-23 22:05:25 +01:00
Howard Chu
76e1492809
ITS#10356 libldap: implement LDAP_OPT_REFHOPLIMIT
2025-06-20 02:35:44 +00:00
Michael Kourlas
585e6aa9a5
ITS#10330 keep socket non-blocking during polling in ldap_int_tls_start
...
During TLS negotiation, if a timeout is set, ldap_int_tls_start sets the
socket to non-blocking and calls ldap_int_poll in a loop if
ldap_int_tls_connect does not succeed the first time it is called.
However, ldap_int_poll sets the socket back to blocking and we currently
do not set it back to non-blocking. This means that a subsequent call to
ldap_int_tls_connect may hang and the configured timeout will not be
enforced. To fix this, we now set the socket back to non-blocking after
ldap_int_poll is called.
2025-06-19 13:49:40 +00:00
Michael Kourlas
76b9c476dd
ITS#10330 do not poll socket in ldap_int_tls_start if no timeout set
...
This probably had no effect, but is unnecessary.
2025-06-19 13:49:40 +00:00
Howard Chu
f7c1754e36
ITS#10355
2025-06-12 15:18:48 +01:00
Howard Chu
7c7988003b
ITS#10355 lmdb mplay: don't assign to stdin/stdout
2025-06-12 15:16:50 +01:00
Howard Chu
c85bcff9c5
ITS#10346
2025-06-10 20:57:48 +01:00
Mike Moritz
7f8f52e0e2
ITS#10346 lmdb: fix compacting copy with large values
2025-06-10 20:56:50 +01:00
Howard Chu
529442b4cb
ITS#10342
2025-06-10 20:43:44 +01:00
jinyaoguo
ce339e82bd
ITS#10342 lmdb: fix potential memleak in child txn_begin
2025-06-10 20:39:52 +01:00
Ondřej Kuzník
6063498361
ITS#10297 Defer hostname resolution til first use
2025-05-09 09:31:26 +01:00
Howard Chu
e5a545d54c
ITS#10328 librewrite: fix substitution cleanup
2025-04-24 16:47:31 +00:00
Howard Chu
10456f5850
ITS#10326 mbedtls: always call mbedtls_ssl_set_hostname()
...
Even if hostname is NULL, the library requires this be called once.
If non-NULL, mbedtls may do a hostname check which is redundant
since libldap does its own check.
2025-04-22 17:26:46 +01:00
Howard Chu
ac89f42433
ITS#10296 lmdb: fix typo in prev commit
2025-02-19 09:15:27 +00:00
Howard Chu
96bffc9202
ITS#10296 fix fdatasync on MacOS
2025-01-28 17:29:56 +00:00
kero
f6b3c3d407
ITS#10296 lmdb: fix fdatasync on MacOS
...
Patch from kero, with corrections by hyc
2025-01-28 17:28:15 +00:00
Ondřej Kuzník
2ba10ad59c
ITS#10229 Adjust ldap_result behaviour with LDAP_MSG_RECEIVED
2024-12-16 16:18:53 +00:00
Ondřej Kuzník
d143f7a2dc
ITS#8047 Fix TLS connection timeout handling
...
The test for async in ldap_int_tls_start was inverted, we already
support calling ldap_int_tls_connect repeatedly. And so long as
LBER_SB_OPT_NEEDS_* are managed correctly, the application should be
able to do the right thing.
Might require a new result code rather than reporposing
LDAP_X_CONNECTING for this.
2024-10-26 20:51:35 +00:00
Howard Chu
790ed0e911
ITS#10275 mdb_load: add -Q option to use NOSYNC for faster loading
2024-10-26 21:27:01 +01:00
Gary Wicker
c5f0ac271c
ITS#10275 mdb_load: add -Q option to use NOSYNC for faster loading
2024-10-26 21:26:17 +01:00
Ondřej Kuzník
40b6592adf
ITS#10263 Reject modifications with invalid whitespace
2024-10-26 16:49:39 +00:00
Ondřej Kuzník
3f6cec3b46
ITS#10264 Free NoD data we stored locally
2024-10-02 13:23:44 +01:00
Ondřej Kuzník
139944ac1e
ITS#7982 Log TLS proto+cipher suite on client side
2024-09-27 14:21:20 +01:00
Ryan Tandy
aa7b1a3db9
ITS#10253 Fix incompatible pointer type
2024-08-21 17:48:45 -07:00
Howard Chu
c9ab732ec1
ITS#10247 libldap: add ldap_url_check_ext() to check URL extensions
...
And check validity earlier, in ldap_initialize() and ldap_init_fd().
2024-08-20 15:39:04 +00:00
Howard Chu
4fc6a3c064
ITS#10247 libldap: reject unrecognized critical URL extensions
2024-08-20 15:39:04 +00:00
Quanah Gibson-Mount
f6d015dd84
ITS#10222
2024-06-28 15:55:18 +00:00
Howard Chu
c6a49d7963
LMDB: tweak mdb_load.1 manpage
...
Add missing -a option to Synopsis
2024-06-28 14:55:06 +00:00
Zach Vonler
b84c35053b
ITS#10222 LMDB: Updated mdb_dump man page
...
The -a option to mdb_load makes the previous text obsolete.
2024-06-28 14:55:01 +00:00
Quanah Gibson-Mount
54f00bd01f
Return to engineering
2024-06-24 16:56:14 +00:00
Howard Chu
1fc09713b1
ITS#10224 libldap: check for OpenSSL EVP_Digest* failure
2024-06-07 15:34:23 +01:00
Howard Chu
4dfe057b58
ITS#10223 libldap: check for OpenSSL SSL_CTX_set_ciphersuites failure
2024-06-07 15:34:01 +01:00
Quanah Gibson-Mount
15edb3b30f
Merge remote-tracking branch 'origin/mdb.RE/0.9'
2024-05-21 17:16:40 +00:00
Quanah Gibson-Mount
3a29a24777
Prep for release
2024-05-21 17:16:06 +00:00
Howard Chu
4d53ae28cf
ITS#10216 libldap: fix OpenSSL channel binding digest
...
The OBJ_find_ API is undocumented but this is what OpenSSL libcrypto does itself.
2024-05-16 16:01:39 +01:00
Howard Chu
283b994104
ITS#10209 libldap: only use OPENSSL_INIT_NO_ATEXIT if it's defined
...
Fake OpenSSL clones like LibreSSL don't support it.
In general we will make no effort to support fake OpenSSL clones.
2024-05-09 17:19:15 +00:00
Quanah Gibson-Mount
2606b60c7a
Merge remote-tracking branch 'origin/mdb.RE/0.9'
2024-05-07 17:29:31 +00:00
Quanah Gibson-Mount
f0fddaa6fe
Merge remote-tracking branch 'origin/mdb.RE/0.9'
2024-05-07 17:29:20 +00:00
Quanah Gibson-Mount
7c99799729
ITS#10212
2024-05-07 16:49:34 +00:00
Quanah Gibson-Mount
ccbec37209
ITS#10198
2024-05-07 16:49:00 +00:00
Howard Chu
d83d6b4ebe
ITS#10212 LMDB: better fix
2024-05-03 20:44:48 +01:00
Howard Chu
37829ce493
ITS#10212 LMDB: init txnid for read-only DBs
2024-05-02 16:33:14 +01:00
Howard Chu
d3ae7c36e5
ITS#10198 Win32 mdb_strerror - stop passing "ignored" parameter
...
The M$ docs say the parameter is ignored, but it actually isn't,
and will cause a SEGV if the pointed memory isn't an init'd va_list.
2024-04-04 07:17:35 +01:00
Quanah Gibson-Mount
073232bbc7
Happy New Year!
2024-03-26 19:45:07 +00:00
Quanah Gibson-Mount
7077d5e601
ITS#9037
2024-03-26 16:25:55 +00:00
Quanah Gibson-Mount
f186e4d934
ITS#10189 - Remove extraneous #endif
2024-03-26 16:23:20 +00:00
Howard Chu
83dc42c5ca
ITS#9037 mdb_page_search: fix error code when DBI record is missing
...
Use the more relevant MDB_BAD_DBI instead of MDB_NOTFOUND error code
2024-03-26 14:52:42 +00:00
Howard Chu
a5953812f0
ITS#9952 TLS/OpenSSL: disable use of atexit()
...
This will only have any effect if libldap is the first caller to
initialize OpenSSL, but that should be all that matters when libldap
is part of a dynmically loaded module. It prevents the crash in the
example cases given.
2024-02-18 10:57:07 +00:00