[Date Prev][Date Next]
Re: OpenLdap 2.4.17 and openssl 0.9.8l and datagram-based TLS
Robert Hanson wrote:
> Our customer is requiring us to use openssl 0.9.8l They have
> determined that there is a problem with datagram based TLS; as long as
> we’re not using datagram-based TLS for communication to slapd, we can go
> ahead and approve this.
Please read this post
and explain to your customer that OpenSSL 0.9.8l is broken and using it will
result in hung connections. Nobody should be using it. 0.9.8m will probably be
released soon due to the issues in 0.9.8l.
> How do I find out if I’m using datagram-based TLS? Is it something in
> the slapd.conf file or is it something in the build of openldap? Or is
> it just not an issue?
It is not an issue. LDAP is a connection-oriented protocol, not datagram-based.
-- Howard Chu
CTO, Symas Corp. http://www.symas.com
Director, Highland Sun http://highlandsun.com/hyc/
Chief Architect, OpenLDAP http://www.openldap.org/project/