You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by Eric Covener <co...@gmail.com> on 2008/05/01 22:43:52 UTC
Re: [users@httpd] Apache httpd 2.2.8 not reading LDAPTrustedGlobalCert files
On Thu, May 1, 2008 at 2:06 PM, Irwin Tillman <ir...@princeton.edu> wrote:
> Whatever's the cause, I've worked around it for now by specifying just a single
> LDAPTrustedGlobalCert statement; currently all my LDAP servers have certificates
> signed by the same CA.
It doesn't look like openldap has any provision for "collecting" a
list of one-shot certificate authorities, so each subsequent
LDAPTrustedGlobalCert sets "the" certificate authority.
Openldap provides an option to pass the path to a directory full of
certificate authorities, but it doesn't look like apache has any way
to set that.
--
Eric Covener
covener@gmail.com
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
[PATCH] Fwd: [users@httpd] Apache httpd 2.2.8 not reading LDAPTrustedGlobalCert files
Posted by Eric Covener <co...@gmail.com>.
If I understand the versioning correctly, this additional cert-type
macro couldn't be added to 1.3.x after a 1.3.0 release. Would be nice
to have the glue in place so we can get HTTPD plugged into openldap
better.
http://people.apache.org/~covener/apr-trunk-ldap_tls_option_certdir.diff
---------- Forwarded message ----------
From: Eric Covener <co...@gmail.com>
Date: Thu, May 1, 2008 at 4:43 PM
Subject: Re: [users@httpd] Apache httpd 2.2.8 not reading
LDAPTrustedGlobalCert files
To: users@httpd.apache.org
On Thu, May 1, 2008 at 2:06 PM, Irwin Tillman <ir...@princeton.edu> wrote:
> Whatever's the cause, I've worked around it for now by specifying
just a single
> LDAPTrustedGlobalCert statement; currently all my LDAP servers
have certificates
> signed by the same CA.
It doesn't look like openldap has any provision for "collecting" a
list of one-shot certificate authorities, so each subsequent
LDAPTrustedGlobalCert sets "the" certificate authority.
Openldap provides an option to pass the path to a directory full of
certificate authorities, but it doesn't look like apache has any way
to set that.
--
Eric Covener
covener@gmail.com
--
Eric Covener
covener@gmail.com