compile OpenLDAP with OpenSSL

[Norberto Bensa]

Please compile OpenLDAP with OpenSSL.

[Micah Gersten (micahg)]

Thanks for reporting this bug and any supporting documentation. Since this bug has enough information provided for a developer to begin work, I'm going to mark it as Triaged and let them handle it from here. Thanks for taking the time to make Ubuntu better! Please report any other issues you may find.

[Antonis Kanouras (akanouras)]

Is there some rationale behind this request?

What do you need from OpenSSL that GNUTLS doesn't provide, in this case?

IIRC, Debian maintained the GNUTLS patches for ages so that any GPLed program could link against libldap without adding an exception allowing linking with OpenSSL. I may be wrong though, it's been years since I last followed openldap's status.

[Mathias Gug (mathiaz)]

As mentioned by Antonis in comment 2 Debian/Ubuntu can't build openldap with openssl for licensing reasons.

[Norberto Bensa (nbensa)]

Rationale: I cannot use certs that were working with openldap from hardy. Is there a tool to convert those certs to gnutls?

Debian patches: remember 2008? I hope they do a better work this time.

Licensing: at least Apache, Cyrus IMAPd, and Postfix, are compiled against OpenSSL. Why cannot OpenLDAP?

[Norberto Bensa (nbensa)]

Hm, mistake from my part. Actually, I CAN use the certificate. I forgot to also configure CA path.

/me hides below the desk...