Bug Description: Currently DS only accepts fortezza and RSA cipher families. This prevents things like ECC certificates from being used.
Fix Description: Instead of hardcoding the cipher families, just grab the current type and use it.
Also cleaned up code: removed unncessary "ifdefs", and switched for loops to use size_t.
https://pagure.io/389-ds-base/issue/49726
Reviewed by: ?
You got my ACK for the fix itself.
I noticed the PR drops checks for USE_OPENLDAP. For that, we should also remove the #include "ldap_ssl.h" at the top of the file. ldap_ssl.h does not even seem to be in the tree. Other than that, it looks all right to me.
USE_OPENLDAP
#include "ldap_ssl.h"
ldap_ssl.h
Additionally, I guess it makes sense to get rid of --with-openldap build flag altogether. @mreynolds, should we file a ticket?
--with-openldap
Yeah we need a different ticket to "remove openldap ifdefs" completely and make openldap the default. I just like to cleanup code when I touch files. Anyway changes applied
rebased onto 27a16a068887e5b9fcab3b4507d58a18e6f1d1ec
Pull-Request has been merged by mreynolds
Created issue #49730 for "remove openldap ifdefs".
389-ds-base is moving from Pagure to Github. This means that new issues and pull requests will be accepted only in 389-ds-base's github repository.
This pull request has been cloned to Github as issue and is available here: - https://github.com/389ds/389-ds-base/issues/2786
If you want to continue to work on the PR, please navigate to the github issue, download the patch from the attachments and file a new pull request.
Thank you for understanding. We apologize for all inconvenience.
Pull-Request has been closed by spichugi
Bug Description: Currently DS only accepts fortezza and RSA cipher families.
This prevents things like ECC certificates from being used.
Fix Description: Instead of hardcoding the cipher families, just grab the
current type and use it.
https://pagure.io/389-ds-base/issue/49726
Reviewed by: ?