DO NOT REPLY [Bug 30782] New: - LDAPTrustedCA Does not log bad status if not found or bad certificate

[bu...@apache.org]

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=30782>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=30782

LDAPTrustedCA Does not log bad status if not found or bad certificate

           Summary: LDAPTrustedCA Does not log bad status if not found or
                    bad certificate
           Product: Apache httpd-2.0
           Version: 2.0.49
          Platform: PC
        OS/Version: Linux
            Status: NEW
          Severity: Normal
          Priority: Other
         Component: mod_ldap
        AssignedTo: bugs@httpd.apache.org
        ReportedBy: gregaryh@juno.com


This is related to bug 26602.
The problem we were having is that the ServerRoot directive is not prepending
the path to LDAPTrustedCA. This has been fixed as of 2.0.50, however there is
still no mention  of a problem in the log files or debug messages if it is
unable to parse the certificate file. On the contrary, it seems to indicate it
is fine. 

[Fri Aug 20 13:23:14 2004] [debug] util_ldap.c(1018): LDAP: SSL trusted
certificate authority file - /usr/local/apache2/conf/ssl.crt/TrustedRootCert.b64
[Fri Aug 20 13:23:14 2004] [debug] util_ldap.c(1034): LDAP: SSL trusted
certificate authority file type - BASE64_FILE
.
.
.
[Fri Aug 20 13:23:14 2004] [debug] mod_auth_ldap.c(790): LDAP: auth_ldap using
SSL connections

If during startup, the file cannot be found or is found and is not in a valid
format it should return a warning message saying so in the error_log or at the
very least in the debug messages.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org