Debian Bug report logs - #560161
php5-ldap: LDAPS and LDAP+TLS return error on valid wildcard certificate check

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: "Clement Hermann \(nodens\)" <clement.hermann@free.fr>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: php5-ldap: LDAPS and LDAP+TLS return error on valid wildcard certificate check

Date: Wed, 09 Dec 2009 12:34:32 +0100

Package: php5-ldap
Severity: normal

Hi,

php5-ldap return error on bind when server is using a wildcard
SSL certificate, even when the certificate is valid. ldapsearch works
OK on the same certificate.

Workaround : add TLS_REQCERT never in ldap.conf (but then you cannot
verify that you are connecting to the right server), or use a simple
(non-wildcard) certificate.

This is probably an upstream bug (see
http://bugs.php.net/bug.php?id=17738), but the relevant bug is
currently in "no feedback" state so maybe it could be re-opened as a new bug.
(I don't have any php version supported upstream readily available that
can connect to a ldaps server with a wildcard cert, so I did not report
it upstream).

Cheers,

-- System Information:
Debian Release: squeeze/sid
  APT prefers unstable
  APT policy: (990, 'unstable'), (500, 'sid'), (500, 'testing'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.31-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Message #10 received at 560161@bugs.debian.org (full text, mbox, reply):

From: Raphael Geissert <geissert@debian.org>

To: "Clement Hermann (nodens)" <clement.hermann@free.fr>, 560161@bugs.debian.org

Cc: 427849-submitter@bugs.debian.org

Subject: Re: [php-maint] Bug#560161: php5-ldap: LDAPS and LDAP+TLS return error on valid wildcard certificate check

Date: Wed, 9 Dec 2009 20:34:07 -0600

Hi,

2009/12/9 Clement Hermann (nodens) <clement.hermann@free.fr>:
> Package: php5-ldap
> Severity: normal
>
> Hi,
>
> php5-ldap return error on bind when server is using a wildcard
> SSL certificate, even when the certificate is valid. ldapsearch works
> OK on the same certificate.
>
> Workaround : add TLS_REQCERT never in ldap.conf (but then you cannot
> verify that you are connecting to the right server), or use a simple
> (non-wildcard) certificate.
>
> This is probably an upstream bug (see
> http://bugs.php.net/bug.php?id=17738), but the relevant bug is
> currently in "no feedback" state so maybe it could be re-opened as a new bug.
> (I don't have any php version supported upstream readily available that
> can connect to a ldaps server with a wildcard cert, so I did not report
> it upstream).
>

Please do report it to upstream as this is not a Debian-specific bug
and chances are that it is going to be fixed sooner if reported there.

CC'ing 427849 as it might be the same problem (and explain why when I
tested it worked).

Cheers,
-- 
Raphael Geissert - Debian Developer
www.debian.org - get.debian.net

Message #15 received at 560161-done@bugs.debian.org (full text, mbox, reply):

From: Ondřej Surý <ondrej@sury.org>

To: 560161-done@bugs.debian.org

Subject: Re: Closing bugs filled against php5 in oldstable

Date: Fri, 04 Jul 2014 16:30:56 +0200

Version: 5.4.4-14

On Fri, Jul 4, 2014, at 14:09, Ondřej Surý wrote:
> Version: 5.4.4-14
> 
> Hey all,
> 
> I am closing the bugs that were filled against php5 5.3 in Debian
> oldstable
> (well and earlier)...
> 
> Feel free to reopen the bug in you can reproduce it with php5 from
> current
> stable Debian release.
> 
> Cheers,
> -- 
> Ondřej Surý <ondrej@sury.org>
> Knot DNS (https://www.knot-dns.cz/) – a high-performance DNS server


-- 
Ondřej Surý <ondrej@sury.org>
Knot DNS (https://www.knot-dns.cz/) – a high-performance DNS server

Send a report that this bug log contains spam.