Re: X509_V_FLAG_PARTIAL_CHAIN support in OpenLDAP

2015-07-07 Thread Doug Leavitt
Including Jordan Brown who is the person that has been replying previously. This is a merger of both previous responses from Aaron and Howard. Doug. On 06/23/15 09:37, Howard Chu wrote: On 06/23/15 08:56, Aaron Richton wrote: On Mon, 22 Jun 2015, Doug Leavitt wrote: [...] The code change it

Re: X509_V_FLAG_PARTIAL_CHAIN support in OpenLDAP

2015-06-23 Thread Howard Chu
Doug Leavitt wrote: Sorry for the delay. I needed to do some due diligence before responding. On 06/06/15 13:35, Howard Chu wrote: Doug Leavitt wrote: Hi, OpenSSL now has X509_V_FLAG_PARTIAL_CHAIN support in the code base as of 1.0.2a. I would like to submit a patch to enable X509_V_FLAG_PA

Re: X509_V_FLAG_PARTIAL_CHAIN support in OpenLDAP

2015-06-23 Thread Aaron Richton
On Mon, 22 Jun 2015, Doug Leavitt wrote: [...] The code change itself is simple. At a minimum it is as simple as adding: #ifdef X509_V_FLAG_PARTIAL_CHAIN Perhaps with a doc patch too, since this would make OpenLDAP one of (apparently very) few OpenSSL-linked applications that honors partial

Re: X509_V_FLAG_PARTIAL_CHAIN support in OpenLDAP

2015-06-22 Thread Doug Leavitt
Sorry for the delay. I needed to do some due diligence before responding. On 06/06/15 13:35, Howard Chu wrote: Doug Leavitt wrote: Hi, OpenSSL now has X509_V_FLAG_PARTIAL_CHAIN support in the code base as of 1.0.2a. I would like to submit a patch to enable X509_V_FLAG_PARTIAL_CHAIN suppor

Re: X509_V_FLAG_PARTIAL_CHAIN support in OpenLDAP

2015-06-06 Thread Howard Chu
Doug Leavitt wrote: Hi, OpenSSL now has X509_V_FLAG_PARTIAL_CHAIN support in the code base as of 1.0.2a. I would like to submit a patch to enable X509_V_FLAG_PARTIAL_CHAIN support in OpenLDAP libldap, assuming it exists in the version of OpenSSL being use to build OpenLDAP. What's the use case