#48199 SSL config should use model sockets
Closed: wontfix 3 years ago by spichugi. Opened 8 years ago by rmeggins.

When changes are made to SSL configuration over LDAP, we should immediately store those changes in a model socket. In slapd_ssl_init2, when calling SSL_ImportFD, we should use the model socket argument. Then we don't have to do all of the SSL configuration in slapd_ssl_init2, that will be done by calling SSL_ImportFD with the model.

At startup, we should create the model socket from the configuration entries, then use the model socket to create the SSL listener sockets.

I'm not sure what we can do dynamically with SSL listener sockets. It may be possible to stop listening (remove the SSL listener fds from the poll list), then use SSL_ReconfigFD to reconfigure them with the latest SSL settings, then add them back.


Per triage, push the target milestone to 1.3.6.

Metadata Update from @nhosoi:
- Issue set to the milestone: 1.3.6.0

7 years ago

Metadata Update from @mreynolds:
- Custom field component reset (from Security - SSL)
- Issue close_status updated to: None
- Issue set to the milestone: 1.4 backlog (was: 1.3.6.0)

6 years ago

Metadata Update from @mreynolds:
- Custom field component adjusted to None
- Custom field reviewstatus adjusted to None
- Issue tagged with: RFE

6 years ago

Metadata Update from @mreynolds:
- Issue priority set to: normal (was: major)
- Issue set to the milestone: FUTURE (was: 1.4 backlog)

3 years ago

389-ds-base is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in 389-ds-base's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/389ds/389-ds-base/issues/1530

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.

Metadata Update from @spichugi:
- Issue close_status updated to: wontfix
- Issue status updated to: Closed (was: Open)

3 years ago

Login to comment on this ticket.

Metadata