RE: (ITS#6537) arl[authority revocation list] issue during opneldap upgrade

[mmishra@isabel.eu]

--_002_3CDE8F636E09F24F90BE98063FB0AD9D76545E3903ISAMAILisabel_
Content-Type: text/plain; charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable


I have attached the arl, and its valid but can't  be validated .

Can you tell me what can be the issue

Thanks
Mayashankar Mishra




Mayashankar Mishra
Consultant
E-mail : mmishra@isabel.eu
Tel :  +32 (0)2 403.18.84
Fax : +32

Isabel NV/S.A.
Keizerinlaan 13-15 Boulevard de l'Imp=E9ratrice
1000 Brussels - Belgium
RPR Bruxelles / RPM Brussel: BE 0455 530 509
http://www.isabel.eu/    http://www.zoomit.eu/

Zoomit is a Registered Trademark of Isabel NV/S.A.
Disclaimer : http://www.isabel.eu/gps/en/disclaimer/mailing.php

-----Original Message-----
From: masarati@aero.polimi.it [mailto:masarati@aero.polimi.it]
Sent: 2010-04-27 16:43
To: Mayashankar Mishra
Cc: openldap-its@openldap.org
Subject: Re: (ITS#6537) arl[authority revocation list] issue during opnelda=
p upgrade

> Full_Name: Mayashankar Mishra
> Version: 2.4.21
> OS: rhel5
> URL: ftp://ftp.openldap.org/incoming/
> Submission from: (NULL) (195.122.110.8)
>
>
> Hi,
>
> I have to upgrade the openldap from version 2.2.26 to 2.4.21 All goes
> fine except for the arl[authority revocation list] failed to get added
> in new database.
>
> I see the binary version of arl from old openldap, its fine.
>
> When i try to upload the same on openldap 2.4.21 it provides the error
> Root error: [LDAP: error code 21 - authorityRevocationList;binary:
> value #0 invalid per syntax]
>
>
> Note the same arl when added in older version of openldap works fine
>
> Any guess what could be the reason

This is not a bug, but likely invalid data.  Certificate list syntax valida=
tor and all related routines were stubs until 2.4, so basically everything =
was treated as valid.  Now the syntax is validated thoroughly.
This ITS will be closed.  Please continue discussion on openldap-software, =
if needed.  Only in case a valid certificate list is not correctly validate=
d (i.e. you detect an actual bug in that code), this ITS can be revitalized=
.

p.






--_002_3CDE8F636E09F24F90BE98063FB0AD9D76545E3903ISAMAILisabel_
Content-Type: application/octet-stream; name="authm.arl"
Content-Description: authm.arl
Content-Disposition: attachment; filename="authm.arl"; size=612;
	creation-date="Tue, 27 Apr 2010 12:51:37 GMT";
	modification-date="Tue, 27 Apr 2010 13:58:42 GMT"
Content-Transfer-Encoding: base64

TUlJQndUQ0JxZ0lCQVRBTkJna3Foa2lHOXcwQkFRVUZBREJVTVFzd0NRWURWUVFHRXdKQ1pURVBN
QTBHQTFVRUJ4TUdTWE5oWW1WcwpNUXN3Q1FZRFZRUUtFd0pEWVRFbk1DVUdBMVVFQXhNZVNYTmhZ
bVZzSUVObGNuUnBabWxqWVhScGIyNGdRWFYwYUc5eWFYUjVGdzB3Ck5URXlNREl3TkRBd05UUmFG
dzB3TlRFeU1ETXdOREF3TURCYU1BQ2dJREFlTUE4R0ExVWRJd1FJTUFhQUJFTkJNREl3Q3dZRFZS
MFUKQkFRQ0FnelNNQTBHQ1NxR1NJYjNEUUVCQlFVQUE0SUJBUUFMV1Jtbjc5VE5sbE9EK29PcXY3
cjY0TlNGZEJHby84ZkNRQXlrYmpjTgpNSkhSalRPU3FmVTBhbXYyaFM1MDlJNjgvVmh3ZndIdzlO
ek5zblBFZXZXa2Ixb0ZXU0x2WjZGdVdYVE5PVjVuOWFZL2JNcUpYNWdQCnR3bE5XZXovQVR2OTlN
NVdiVVVLUGpEeHBjOTBiZDJ4ak1vS0JobHNyeWtNZzBEWGFSa2lZWVJFbDNsWEYwd3I0Ri9Gc2ZP
N1FTK2YKemtpZm1JMDlaN3pDSWMyMDQzeGwyUnBYdlJvc3R6cnE4bmNRZGpCaDVVZEhqM3FXMEhR
ZmtDYU54aUl5M2VaWTRKS3lDcVc5N25UeQpoOXY1QXMxWDJtdnVqYlR0S1c1aTVsblhlSER0ak9k
dWZ2YTg2VGJadlN5UXlpa3hMUmxwUWxlK1lpNXg2TldkRE43U3o5TE8K

--_002_3CDE8F636E09F24F90BE98063FB0AD9D76545E3903ISAMAILisabel_--