head	1.2;
access;
symbols
	pkgsrc-2026Q3:1.1.0.2
	pkgsrc-2026Q3-base:1.1;
locks; strict;
comment	@ * @;


1.2
date	2026.10.25.07.12.34;	author adam;	state dead;
branches;
next	1.1;
commitid	N47DsTF5VhOAnP0H;

1.1
date	2026.08.27.16.11.18;	author jperkin;	state Exp;
branches;
next	;
commitid	z0W4qsQaH1QZfiTG;


desc
@@


1.2
log
@openldap: updated to 2.7.2

OpenLDAP 2.7.2 Release (2026/10/21)

	Added slapd support for comments with ACLS
	Added slapd-config option to throttle when qtime exceeds threshold
	Added slapo-nssov option to forward updates
	Fixed libldap with deeply nested URL filters
	Fixed slapd GnuTLS client-cert verification handling
	Fixed slapo-accesslog handling of per-op info state
	Fixed slapo-sssvlv control parsing
	Contrib
		Fixed slappw-sha2 pointer aliasing
		Fixed denyop rejection handling
	Minor Cleanup
@
text
@$NetBSD: patch-libraries_libldap_tls__o.c,v 1.1 2026/08/27 16:11:18 jperkin Exp $

Support pre-C23 compilers.

--- libraries/libldap/tls_o.c.orig	2026-08-27 15:54:30.824812399 +0000
+++ libraries/libldap/tls_o.c
@@@@ -543,7 +543,7 @@@@ tlso_ctx_init( struct ldapoptions *lo, s
 
 				while ((info = OSSL_STORE_load( sctx ))) {
 					switch (OSSL_STORE_INFO_get_type( info )) {
-					case OSSL_STORE_INFO_CERT:
+					case OSSL_STORE_INFO_CERT: {
 						X509 *cert = OSSL_STORE_INFO_get0_CERT( info );
 						X509_STORE *store = SSL_CTX_get_cert_store( ctx );
 						if ( !X509_STORE_add_cert( store, cert ) ) {
@@@@ -565,6 +565,7 @@@@ tlso_ctx_init( struct ldapoptions *lo, s
 							}
 						}
 						break;
+					}
 					default:
 						/* ignore other types */
 						break;
@@@@ -753,7 +754,7 @@@@ tlso_ctx_init( struct ldapoptions *lo, s
 						return -1;
 					}
 					break;
-				case OSSL_STORE_INFO_CERT:
+				case OSSL_STORE_INFO_CERT: {
 					X509 *cert = OSSL_STORE_INFO_get0_CERT(info);
 					int is_ca = X509_check_ca( cert );
 					if ( !is_ca && !SSL_CTX_use_certificate( ctx, cert )) {
@@@@ -773,7 +774,8 @@@@ tlso_ctx_init( struct ldapoptions *lo, s
 						return -1;
 					}
 					break;
-				case OSSL_STORE_INFO_CRL:
+				}
+				case OSSL_STORE_INFO_CRL: {
 					X509_STORE *x509_s = SSL_CTX_get_cert_store( ctx );
 					if ( !X509_STORE_add_crl( x509_s,
 							OSSL_STORE_INFO_get0_CRL(info) )) {
@@@@ -785,6 +787,7 @@@@ tlso_ctx_init( struct ldapoptions *lo, s
 						return -1;
 					}
 					break;
+				}
 				default:
 					/* ignore other types */
 					break;
@


1.1
log
@openldap: Support pre-C23 compilers.

Fixes openldap-client build issue seen in the daily macOS reports.
@
text
@d1 1
a1 1
$NetBSD$
@