Mailing-List: contact dev-help@directory.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Apache Directory Developers List" <dev@directory.apache.org>
Received-SPF: pass (herse.apache.org: domain of enriquer9@gmail.com designates
 66.249.92.174 as permitted sender)
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=beta;
        h=received:message-id:date:from:reply-to:to:subject:mime-version:content-type:content-transfer-encoding:content-disposition;
        b=GUwx+XOnT97yfmce53otNkUBuzj7B8qojqgtnxJJWlaN//d2Ndvg78UsEDBJHA0Y0jU9RNhQZ6/fCisLXi6/0XFPMm9HULPxkHT5XxzM5xJl/Xk07Ep28VShWeiF1QMbBr0LXxD8NxeKy44w9OmErr0TefvpuHYB9X3tPv9EmRA=
Message-ID: <568753d90703072106n3cc1921ejc1eafbe7c91a6a9a@mail.gmail.com>
Date: Wed, 7 Mar 2007 21:06:55 -0800
From: "Enrique Rodriguez" <enriquer9@gmail.com>
Reply-To: erodriguez@apache.org
To: "Apache Directory Developers List" <dev@directory.apache.org>
Subject: StartTLS
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

What is (was) the status of StartTLS?  It never worked, did it?  I ask
because I saw some code in the LDAP PP while I was in there that
seemed to indicate at least an attempt was made at one point.  I
didn't see how it could have worked, so I added my own code, and I
have it working.  It even seems to stack OK with SASL.

$ ldapsearch -b "dc=example,dc=com" "(uid=erodriguez)" -ZZ -Y
DIGEST-MD5 -U erodriguez -R example.com -w secret

If no one's on this I'll add a JIRA so we can track it.  The OID
registers as an extension.  Is there anything else the server needs to
do to announce it supports Start TLS?

Enrique