mirrors/pfsense
2
0
Fork 0
mirror of https://github.com/pfsense/pfsense.git synced 2025-10-26 11:38:35 +00:00
Code Issues Packages Projects Releases Wiki Activity

Something in the LDAP libraries has changed and it no longer likes spaces in the CA filename. Use the refid for the CA filename since it will always be unqiue, and it will never contain any spaces, unlike authname or the CA's descr.

Browse Source
This commit is contained in:
jim-p 2013-01-14 16:27:33 -05:00
parent e550b82c03
commit 6f165ffcdf
1 changed files with 5 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
etc/inc/auth.inc
View File

@ -670,14 +670,14 @@ function ldap_setup_caenv($authcfg) {
}
if (!is_dir("{$g['varrun_path']}/certs"))
@mkdir("{$g['varrun_path']}/certs");
if (file_exists("{$g['varrun_path']}/certs/{$authcfg['name']}.ca"))
@unlink("{$g['varrun_path']}/certs/{$authcfg['name']}.ca");
file_put_contents("{$g['varrun_path']}/certs/{$authcfg['name']}.ca", base64_decode($caref['crt']));
@chmod("{$g['varrun_path']}/certs/{$authcfg['name']}.ca", 0600);
if (file_exists("{$g['varrun_path']}/certs/{$caref['refid']}.ca"))
@unlink("{$g['varrun_path']}/certs/{$caref['refid']}.ca");
file_put_contents("{$g['varrun_path']}/certs/{$caref['refid']}.ca", base64_decode($caref['crt']));
@chmod("{$g['varrun_path']}/certs/{$caref['refid']}.ca", 0600);
putenv('LDAPTLS_REQCERT=hard');
/* XXX: Probably even the hashed link should be created for this? */
putenv("LDAPTLS_CACERTDIR={$g['varrun_path']}/certs");
putenv("LDAPTLS_CACERT={$g['varrun_path']}/certs/{$authcfg['name']}.ca");
putenv("LDAPTLS_CACERT={$g['varrun_path']}/certs/{$caref['refid']}.ca");
}
}