This is an automated email from the git hooks/post-receive script.
mreynolds pushed a commit to branch 389-ds-base-1.3.10
in repository 389-ds-base.
The following commit(s) were added to refs/heads/389-ds-base-1.3.10 by this push:
new bcb1e24 Issue 50834 - Incorrectly setting the NSS default SSL version max
bcb1e24 is described below
commit bcb1e243c8d5226da5af1728c8093b99a856ebcc
Author: Mark Reynolds <mreynolds(a)redhat.com>
AuthorDate: Mon Jan 20 13:16:36 2020 -0500
Issue 50834 - Incorrectly setting the NSS default SSL version max
Description: We've been using the wrong function to get the NSS max
version We were calling SSL_VersionRangeGetSupported()
which gets the versions NSS "can" handle, but
SSL_VersionRangeGetDefault() gets the versions that
are actually "enabled".
relates:
https://pagure.io/389-ds-base/issue/50834
Reviewed by: mreynolds(one line commit rule)
---
ldap/servers/slapd/ssl.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/ldap/servers/slapd/ssl.c b/ldap/servers/slapd/ssl.c
index ed054db..c71e301 100644
--- a/ldap/servers/slapd/ssl.c
+++ b/ldap/servers/slapd/ssl.c
@@ -1164,7 +1164,7 @@ slapd_nss_init(int init_ssl __attribute__((unused)), int
config_available __attr
char *certdir;
char emin[VERSION_STR_LENGTH], emax[VERSION_STR_LENGTH];
/* Get the range of the supported SSL version */
- SSL_VersionRangeGetSupported(ssl_variant_stream, &enabledNSSVersions);
+ SSL_VersionRangeGetDefault(ssl_variant_stream, &enabledNSSVersions);
(void)slapi_getSSLVersion_str(enabledNSSVersions.min, emin, sizeof(emin));
(void)slapi_getSSLVersion_str(enabledNSSVersions.max, emax, sizeof(emax));
--
To stop receiving notification emails like this one, please contact
the administrator of this repository.