Commit graph

57 commits

Author SHA1 Message Date
Ondřej Kuzník
7c5159a904 ITS#8753 Improve LDAP_OPT_X_TLS_PEERKEY_HASH documentation further 2022-03-06 15:33:30 +00:00
Ondřej Kuzník
a2a2ebba23 ITS#8753 Document LDAP_OPT_X_TLS_PEERKEY_HASH 2022-02-14 20:32:29 +00:00
Ondřej Kuzník
76947f2608 ITS#9189 Fix typo 2022-02-14 20:32:29 +00:00
Ondřej Kuzník
39248b2107 ITS#9502 Clarify ldap_get/set_option API 2022-02-14 20:32:29 +00:00
Quanah Gibson-Mount
788e9592ba Happy New Year! 2022-01-07 18:40:00 +00:00
Howard Chu
dfcaa3f01e ITS#6248 support multiple CAcert dirs 2021-07-22 21:07:21 +01:00
Nadezhda Ivanova
db389d38ce ITS#9502 Implement LDAP_OPT_TCP_USER_TIMEOUT 2021-04-22 21:52:12 +00:00
Howard Chu
2a3b64f4e6 ITS#9518 add LDAP_OPT_X_TLS_PROTOCOL_MAX option
OpenSSL only
2021-04-09 18:12:40 +01:00
HoweverAT
9d594a118e ITS#8847 Add SOCKET_BIND_ADDRESSES Option 2021-03-25 18:47:11 +00:00
Ondřej Kuzník
c109bdd755 ITS#9292 Explicitly mention ldap_memfree 2021-02-17 15:13:49 +00:00
Quanah Gibson-Mount
efaf9a4a17 Happy New Year! 2021-01-11 19:25:53 +00:00
Howard Chu
608a822349 ITS#9318 add TLS_REQSAN option
Add an option to specify how subjectAlternativeNames should be
handled when validating the names in a server certificate.
2020-08-21 18:05:08 +00:00
Howard Chu
2386a11649 ITS#9054 Add support for multiple EECDH curves
Requires OpenSSL 1.0.2 or newer
2020-08-21 07:58:07 +01:00
Ryan Tandy
7dfbcfa151 Fix typos 2020-04-28 11:24:48 -07:00
Isaac Boukris
3cd50fa8b3 ITS#9189 rework sasl-cbinding support
Add LDAP_OPT_X_SASL_CBINDING option to define the binding type to use,
defaults to "none".

Add "tls-endpoint" binding type implementing "tls-server-end-point" from
RCF 5929, which is compatible with Windows.

Fix "tls-unique" to include the prefix in the bindings as per RFC 5056.
2020-04-23 21:00:39 +02:00
Quanah Gibson-Mount
a019e7fe1a ITS#9207 - Remove MozNSS code and documentation 2020-04-20 21:38:01 +00:00
Quanah Gibson-Mount
f6ad222e41 Happy New Year! 2020-01-09 16:50:21 +00:00
Nadezhda Ivanova
f239bbd3c6 Add LDAP_OPT_KEEPCONN option
This option instructs try_read1msg to not free the connection on read error
or on Notice of disconnections, but leave it to the caller. It is needed,
for example, by back-asyncmeta, who expects to have control on when
its target connections are freed. Must be used with caution.
2019-02-28 17:27:54 +00:00
Quanah Gibson-Mount
b45a6a7dc7 Happy New Year! 2019-01-14 18:46:16 +00:00
Quanah Gibson-Mount
59e9ff6243 Happy New Year 2018-03-22 15:35:24 +00:00
Quanah Gibson-Mount
1df85d3427 Happy New Year! 2017-01-03 12:36:47 -08:00
Quanah Gibson-Mount
6c4d6c880b Happy New Year! 2016-01-29 13:32:05 -06:00
Quanah Gibson-Mount
1705fa7e55 Happy New Year 2015-02-11 15:36:57 -06:00
Howard Chu
9b4895561c ITS#8032 document LDAP_OPT_API_INFO/FEATURE_INFO 2015-01-22 01:40:04 +00:00
Kurt Zeilenga
5c878c1bf2 Happy new year (belated) 2014-01-25 05:21:25 -08:00
Howard Chu
16f8b0902c ITS#7398 add LDAP_OPT_X_TLS_PEERCERT
retrieve peer cert for an active TLS session
2013-09-10 04:31:39 -07:00
Howard Chu
0045e56c34 ITS#7683 more for tls version/cipher info
Add LDAP_OPT_X_TLS_VERSION / LDAP_OPT_X_TLS_CIPHER for
retrieving from an LDAP session handle. Update ldap_get_option(3).
2013-09-09 11:52:10 -07:00
Kurt Zeilenga
0fd1bf30b8 Happy New Year 2013-01-02 10:22:57 -08:00
Howard Chu
1b393b7421 ITS#7411 delete trailing whitespace in ldap_get_option.3 2012-10-11 08:37:33 -07:00
Howard Chu
7767a41061 ITS#7240 note option inheritance behavior 2012-04-18 03:09:53 -07:00
Kurt Zeilenga
2bbf9804b9 Happy New Year! 2012-01-01 07:10:53 -08:00
Howard Chu
c721b2b7a0 ITS#6816 MozNSS doc additions from Rich Megginson @ Red Hat. Needs cleanup. 2011-01-31 21:13:11 +00:00
Kurt Zeilenga
966cef8c9a Happy New Year 2011-01-05 00:42:37 +00:00
Howard Chu
0f30db1c46 ITS#6625 concurrency patch from Doug Leavitt @ Oracle .com 2010-10-22 21:45:48 +00:00
Kurt Zeilenga
3dadeb3efe happy belated New Year 2010-04-13 22:17:29 +00:00
Howard Chu
7190a68f28 spell out CTX -> context 2009-08-26 23:21:13 +00:00
Howard Chu
702f5967f2 More tls tweaks 2009-08-26 23:17:43 +00:00
Howard Chu
ff9693a15d Explanation and warnings about OPT_X_TLS_CTX and OPT_X_TLS_SSL_CTX. 2009-08-26 23:12:47 +00:00
Howard Chu
c012c105ba GnuTLS tweaks 2009-08-26 22:57:22 +00:00
Howard Chu
d03052b894 More cleanup 2009-08-26 22:52:09 +00:00
Howard Chu
7980931b63 Minor cleanup 2009-08-26 22:32:09 +00:00
Pierangelo Masarati
274111f8ae more clarifications 2009-08-19 22:34:16 +00:00
Pierangelo Masarati
f52273fe84 first round of fixes; add TCP keepalive stuff. 2009-08-19 20:27:10 +00:00
Pierangelo Masarati
2813d6bc3c another 'round 2009-08-19 20:15:39 +00:00
Pierangelo Masarati
fdb8ce4608 complete SASL options 2009-08-19 19:32:09 +00:00
Pierangelo Masarati
d36829a1ab document all options, including TLS and (not yet complete) SASL. Needs expert review 2009-08-19 19:00:48 +00:00
Howard Chu
7af319a571 ITS#6023 minor formatting tweaks 2009-06-03 00:43:44 +00:00
Kurt Zeilenga
4af9eb9715 Update copyright notices 2009-01-22 00:40:04 +00:00
Kurt Zeilenga
c890c96d13 Happy New Year (belated) 2008-01-08 00:19:56 +00:00
Pierangelo Masarati
006b9d9799 fix *_TIMEOUT API documentation (ITS#5188) 2007-10-17 16:32:11 +00:00