Skip Menu |
 

This queue is for tickets about the perl-ldap CPAN distribution.

Report information
The Basics
Id: 66753
Status: resolved
Priority: 0/
Queue: perl-ldap

People
Owner: Nobody in particular
Requestors: mmaslano [...] redhat.com
Cc:
AdminCc:

Bug Information
Severity: Normal
Broken in: 0.4001
Fixed in: 0.50



Subject: tests are failing with latest openldap
Download (untitled) / with headers
text/plain 1.3k
For new openldap-2.4.23 are certificates mandatory. Without them server doesn't respond correctly. IO::Socket::SSL (v1.39) already have options to use it, but they need to be incorporated in perl-ldap. I'm not sure whether there is problem only in test suite or also in code. The last release of openldap brought a lot of changes, so there could be more. perl t/55ssl.t 1..15 ok 1 # client ok 2 # bind: 0: Success ok 3 # data/50-in.ldif not ok 4 # start_stl: 1: SSL connect attempt failed because of handshake problemserror:00000000:lib(0):func(0):reason(0) ok 5 # start_stl: 1: Unexpected EOF not ok 6 # search: 81: Can't contact LDAP server not ok 7 # Can't contact LDAP server ldaps://localhost:9010/ IO::Socket::SSL: SSL connect attempt failed because of handshake problemserror:00000000:lib(0):func(0):reason(0) at t/common.pl line 132. perl t/57url.t 1..22 ok 1 # client ok 2 # bind: 0: Success ok 3 # data/50-in.ldif ok 4 # search: 0: Success ok 5 # Success ok 6 # Read 50-out.ldif ok 7 # data/50-cmp.ldif Trying ldap://localhost:9009/ ok 8 # ldap://localhost:9009/ client ok 9 # search: 0: Success ok 10 # Success ok 11 # Read 50-out.ldif ok 12 # data/50-cmp.ldif Trying ldaps://localhost:9010/ ldaps://localhost:9010/ IO::Socket::SSL: SSL connect attempt failed because of handshake problemserror:00000000:lib(0):func(0):reason(0) at t/common.pl line 146.
Download (untitled) / with headers
text/plain 1.6k
On Mon Mar 21 11:42:24 2011, mmaslano@redhat.com wrote: Show quoted text
> For new openldap-2.4.23 are certificates mandatory. Without them
server Show quoted text
> doesn't respond correctly. IO::Socket::SSL (v1.39) already have
options Show quoted text
> to use it, but they need to be incorporated in perl-ldap. I'm not sure > whether there is problem only in test suite or also in code. The last > release of openldap brought a lot of changes, so there could be more. > > > perl t/55ssl.t > 1..15 > ok 1 # client > ok 2 # bind: 0: Success > ok 3 # data/50-in.ldif > not ok 4 # start_stl: 1: SSL connect attempt failed because of
handshake Show quoted text
> problemserror:00000000:lib(0):func(0):reason(0) > ok 5 # start_stl: 1: Unexpected EOF > not ok 6 # search: 81: Can't contact LDAP server > not ok 7 # Can't contact LDAP server > ldaps://localhost:9010/ IO::Socket::SSL: SSL connect attempt failed > because of handshake problemserror:00000000:lib(0):func(0):reason(0)
at Show quoted text
> t/common.pl line 132. > > perl t/57url.t > 1..22 > ok 1 # client > ok 2 # bind: 0: Success > ok 3 # data/50-in.ldif > ok 4 # search: 0: Success > ok 5 # Success > ok 6 # Read 50-out.ldif > ok 7 # data/50-cmp.ldif > Trying ldap://localhost:9009/ > ok 8 # ldap://localhost:9009/ client > ok 9 # search: 0: Success > ok 10 # Success > ok 11 # Read 50-out.ldif > ok 12 # data/50-cmp.ldif > Trying ldaps://localhost:9010/ > ldaps://localhost:9010/ IO::Socket::SSL: SSL connect attempt failed > because of handshake problemserror:00000000:lib(0):func(0):reason(0)
at Show quoted text
> t/common.pl line 146.
Now that perl-ldap v0.44 has been released with changes in that region, can you give it a try, test whether it fixes the issue, and report back. Thanks Peter
Download (untitled) / with headers
text/plain 157b
Hi, I guess I found the cause of the issue: the certificate used in the tests is outdated. I will try to create a new one that lasts longer ;-) Best PEter
Download (untitled) / with headers
text/plain 215b
Updated versions of key.pem & cert.pem as well as a tool to re-generate them will be in the next release of perl-ldap. In the meantime they can be found at https://github.com/marschap/perl-ldap/tree/next Peter


This service is sponsored and maintained by Best Practical Solutions and runs on Perl.org infrastructure.

Please report any issues with rt.cpan.org to rt-cpan-admin@bestpractical.com.