From: Gunter Knauf <gk@gknw.de>
Date: Sat, 25 Aug 2007 12:10:30 +0000 (+0000)
Subject: bail out with error if someone tries to use another cert than PEM with OpenLDAP.
X-Git-Tag: curl-7_17_0~34
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=327c0d6b1ccbaa73147ffd3f250c7f95e6f4d70d;p=curl

bail out with error if someone tries to use another cert than PEM with OpenLDAP.
---

diff --git a/lib/ldap.c b/lib/ldap.c
index 4e6261632..abbd52f29 100644
--- a/lib/ldap.c
+++ b/lib/ldap.c
@@ -216,6 +216,12 @@ CURLcode Curl_ldap(struct connectdata *conn, bool *done)
 #elif defined(LDAP_OPT_X_TLS)
     if (data->set.ssl.verifypeer) {
       /* OpenLDAP SDK supports BASE64 files. */
+      if ((data->set.str[STRING_CERT_TYPE]) &&
+              (!strequal(data->set.str[STRING_CERT_TYPE], "PEM"))) {
+        failf(data, "LDAP local: ERROR OpenLDAP does only support PEM cert-type!");
+        status = CURLE_SSL_CERTPROBLEM;
+        goto quit;
+      }
       if (!ldap_ca) {
         failf(data, "LDAP local: ERROR PEM CA cert not set!");
         status = CURLE_SSL_CERTPROBLEM;