Re: X509_V_FLAG_PARTIAL_CHAIN support in OpenLDAP

2015-07-07 Thread Doug Leavitt
Including Jordan Brown who is the person that has been replying previously. This is a merger of both previous responses from Aaron and Howard. Doug. On 06/23/15 09:37, Howard Chu wrote: On 06/23/15 08:56, Aaron Richton wrote: On Mon, 22 Jun 2015, Doug Leavitt wrote: [...] The code change it

Re: X509_V_FLAG_PARTIAL_CHAIN support in OpenLDAP

2015-06-23 Thread Howard Chu
X509_V_FLAG_PARTIAL_CHAIN support in OpenLDAP libldap, assuming it exists in the version of OpenSSL being use to build OpenLDAP. What's the use case? It appears that the feature has been in OpenSSL since around 2012, but I don't see much documentation or chatter about it. Why is it useful, and do

Re: X509_V_FLAG_PARTIAL_CHAIN support in OpenLDAP

2015-06-23 Thread Aaron Richton
On Mon, 22 Jun 2015, Doug Leavitt wrote: [...] The code change itself is simple. At a minimum it is as simple as adding: #ifdef X509_V_FLAG_PARTIAL_CHAIN Perhaps with a doc patch too, since this would make OpenLDAP one of (apparently very) few OpenSSL-linked applications that honors partial

Re: X509_V_FLAG_PARTIAL_CHAIN support in OpenLDAP

2015-06-22 Thread Doug Leavitt
support in OpenLDAP libldap, assuming it exists in the version of OpenSSL being use to build OpenLDAP. What's the use case? It appears that the feature has been in OpenSSL since around 2012, but I don't see much documentation or chatter about it. Why is it useful, and do GnuTLS and MozN

Re: X509_V_FLAG_PARTIAL_CHAIN support in OpenLDAP

2015-06-06 Thread Howard Chu
Doug Leavitt wrote: Hi, OpenSSL now has X509_V_FLAG_PARTIAL_CHAIN support in the code base as of 1.0.2a. I would like to submit a patch to enable X509_V_FLAG_PARTIAL_CHAIN support in OpenLDAP libldap, assuming it exists in the version of OpenSSL being use to build OpenLDAP. What's th

X509_V_FLAG_PARTIAL_CHAIN support in OpenLDAP

2015-06-05 Thread Doug Leavitt
Hi, OpenSSL now has X509_V_FLAG_PARTIAL_CHAIN support in the code base as of 1.0.2a. I would like to submit a patch to enable X509_V_FLAG_PARTIAL_CHAIN support in OpenLDAP libldap, assuming it exists in the version of OpenSSL being use to build OpenLDAP. Before I submit any patch I would