alishapapun / 389-admin

Forked from 389-admin 4 years ago
Clone

7ba0631 Resolves: bug 426056

Authored and Committed by rmeggins 16 years ago
    Resolves: bug 426056
    Bug Description: Unable to connect to admin express via SSL - firefox cipher issues?
    Reviewed by: nkinder, nhosoi (Thanks!)
    Fix Description: The admin server was defaulting to EXPORT instead of DOMESTIC so was not enabling the domestic ciphers by default.  Then when the admin server SSL was configured, it would give it a list of old ciphers not currently supported by Firefox.  Also, we are still being affected by Bug 151705 Processed: AS 6.2 Console cipher preferences bug, so when the list of ciphers pops up, you have to make sure all of the SSLv2 ciphers are disabled and the SSLv3 and TLS ciphers you want to use are enabled.
    I also discovered a problem with the ugdsconfig CGI program - it was being caught by the admldapBuildInfoSSL problem where it tries to use the SIEDN to bind.  So I had to use the same hack used in mod_admserv and elsewhere to force it to use the correct bind dn and password.
    Finally, I updated the list of ciphers in console.conf to reflect the full list of ciphers supported by mod_nss.
    Platforms tested: RHEL5 x86_64
    Flag Day: no
    Doc impact: no
    
        
file modified
+52 -30
file modified
+3 -0
file modified
+6 -0
file modified
+2 -0