nsslapd-extract-pemfiles should be enabled by default as openldap is moving to openssl

[389-ds-bot]

Cloned from Pagure issue: https://pagure.io/389-ds-base/issue/49560

• Created at 2018-02-06 19:36:50 by tbordaz (@tbordaz)
• Closed at 2019-02-19 16:09:25 as fixed
• Assigned to nobody
• Associated bugzillas
  • https://bugzilla.redhat.com/show_bug.cgi?id=1542645

---

Issue Description

Due to a change in the OpenLDAP client libraries (switching from NSS to OpenSSL), the TLS options LDAP_OPT_X_TLS_CACERTFILE, LDAP_OPT_X_TLS_KEYFILE, LDAP_OPT_X_TLS_CERTFILE, need to specify path to PEM files.

Those PEM files are extracted from the key/certs from the NSS db in /etc/dirsrv/slapd-xxx

Those files are extracted if the option (under 'cn=config') nsslapd-extract-pemfiles is set to 'on'.

The default value is 'off', that prevent secure outgoing connection.

Package Version and Platform

1.3.7

Steps to reproduce

see related BZ

Actual results

Expected results

[389-ds-bot]

Comment from tbordaz (@tbordaz) at 2018-02-06 19:37:05

Metadata Update from @tbordaz:

• Custom field component adjusted to None
• Custom field origin adjusted to None
• Custom field reviewstatus adjusted to None
• Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=1542645
• Custom field type adjusted to None
• Custom field version adjusted to None

[389-ds-bot]

Comment from tbordaz (@tbordaz) at 2018-02-06 19:37:20

Metadata Update from @tbordaz:

• Issue set to the milestone: 1.3.7.0

[389-ds-bot]

Comment from tbordaz (@tbordaz) at 2018-02-06 19:53:02

[389-ds-bot]

Comment from mhonek (@kenoh) at 2018-02-06 21:39:44

Patch looks good to me. ACK+

[389-ds-bot]

Comment from mhonek (@kenoh) at 2018-02-06 21:53:43

Metadata Update from @kenoh:

• Custom field reviewstatus adjusted to ack (was: None)

[389-ds-bot]

Comment from mreynolds (@mreynolds389) at 2018-02-07 00:38:58

ca8f1fd..8304cae master -> master

806de71..b68d3cb 389-ds-base-1.3.7 -> 389-ds-base-1.3.7

[389-ds-bot]

Comment from spichugi (@droideck) at 2018-03-07 09:40:42

commit 73638d6
Author: Simon Pichugin droideck@redhat.com
Date: Tue Feb 20 19:49:35 2018 +0100

[389-ds-bot]

Comment from mhonek (@kenoh) at 2019-02-19 16:09:26

Metadata Update from @kenoh:

• Issue close_status updated to: fixed
• Issue status updated to: Closed (was: Open)