Your message dated Fri, 18 Jul 2025 16:21:39 +0200
with message-id <[email protected]>
and subject line Re: Bug#1093578: release-notes: openldap switches TLS library
impacting behavior
has caused the Debian Bug report #1093578,
regarding release-notes: openldap switches TLS library impacting behavior
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1093578: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1093578
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: release-notes
Severity: normal
X-Debbugs-Cc: Ryan Tandy <[email protected]>
Hi,
I just saw this on my daily upgrade of my system. Probably worth
mentioning in the release notes.
Paul
openldap (2.6.9+dfsg-1~exp2) experimental; urgency=medium
The TLS library used for the OpenLDAP packages has changed from GnuTLS to
OpenSSL. This affects the set of configuration options available, as
well as
the behaviour of some options.
If no TLS CA certificates are specified, the system default trust
store will
now be loaded automatically. If you do not want the default CAs to be
used,
you must configure the trusted CAs explicitly.
Previously, the TLS_CIPHER_SUITE option accepted a GnuTLS priority
string.
Now, the option accepts an OpenSSL cipher list. For information about the
cipher list format, see the openssl-ciphers(1) man page.
The TLS_CRLFILE option is no longer supported; it is accepted, but
silently
ignored. Use the TLS_CRLCHECK option instead. The TLS_CACERTDIR
option must
also be set.
For more information about the libldap configuration, see the
ldap.conf(5)
man page.
For more information about the slapd(8) configuration, see
/usr/share/doc/slapd/README.Debian.gz.
-- Ryan Tandy <[email protected]> Fri, 10 Jan 2025 18:17:14 -0800
OpenPGP_signature.asc
Description: OpenPGP digital signature
--- End Message ---
--- Begin Message ---
On Sat, May 24, 2025 at 05:45:22PM -0700, Ryan Tandy wrote:
> Control: tag -1 patch
>
> https://salsa.debian.org/ddp-team/release-notes/-/merge_requests/241
Got merged as
https://salsa.debian.org/ddp-team/release-notes/-/commit/7e73b0db4d7aa175c1e5667454de73f0ee7b460b
Closing.
Thanks,
Chris
--- End Message ---
