v1.1.9 2018-08-02, Airborne Positive

Airborne Positive

On the Airborne Day, on the day of Foundation and the 16-year anniversary of Positive Technologies.

Briefly:

1. Fixed TLS/SSL major bugs (deadlocks and segfaults).
2. Other minor bugs were fixed.
3. Added TLS/SSL test into test suite.

New features and Compatibility breaking: none

Documentation:

• fix quoting example in man-pages.
• add DN qualifier and regexp for sock backend (ITS#8051).
• update libmdbx Project Status.

Major and Security bugs:

• libreldap: fix init/shutdown races/segfaults with modern OpenSSL.
• libreldap: fix deadlock/recursion inside tls_init() internals.

Minor bugs:

• libreldap: add printability checks on the dc RDN (ITS#8842).
• overlay-memberof: Improve memberof cn=config handling (ITS#8663).
• backend-glue: don't finish initialisation in tool mode unless requested (ITS#8667).
• backend-mdb, backend-bdb: don't convert IDL to range needlessly (ITS#8868).
• backend-sock: use a regexp (ITS#8051).
• backend-sock: add DN qualifier (ITS#8051).
• libreldap: fix unlock in error-case inside thread-pool handle_pause().
• libreldap: fix ber_realloc after a partial ber_flush (ITS#8864).
• slapd: fix wrong/duplicate listening if bind failed.
• slapd: fix ldif-wrap errmsg typo.

Performance:

• slapd: minor refine suspend/refine listeners.

Build:

• configure: update for modern libtool.
• configure: fix quoting for empty variable.
• configure: add TLS-tests.
• configure: add checking for libnsspem.

Cosmetics:

• libreldap: message-hint to check libnsspem.so for TLS by MozNSS.
• slapd: cleanup-drop SLAP_FD2SOCK/SLAP_SOCK2FD/SLAP_SOCKNEW.

Other:

• tests: don't ignore its8667 regression while CI/buzz-testing.
• tests: fix $MONITORDB usage.
• tests: add regression test for ITS#8616.
• tests: add TLS-tests.
• ci: migrate to Circle-CI 2.0