ITS#8427 Take late TLS configuration into account

diff --git a/servers/slapd/back-ldap/config.c b/servers/slapd/back-ldap/config.c
index 151dd87976b2b8b32fe027dc5097d15013c8c3c3..1f5eced370d11a883e9fc0fc60de3ff32118be76 100644 (file)
--- a/servers/slapd/back-ldap/config.c
+++ b/servers/slapd/back-ldap/config.c
@@ -989,6 +989,10 @@ slap_idassert_parse( ConfigArgs *c, slap_idassert_t *si )
        }
 
        bindconf_tls_defaults( &si->si_bc );
+       if ( si->si_bc.sb_tls_ctx ) {
+               ldap_pvt_tls_ctx_free( si->si_bc.sb_tls_ctx );
+               si->si_bc.sb_tls_ctx = NULL;
+       }
 
        return 0;
 }
@@ -1808,6 +1812,10 @@ done_url:;
                        }
                        bindconf_tls_defaults( &li->li_tls );
                }
+               if ( li->li_tls.sb_tls_ctx ) {
+                       ldap_pvt_tls_ctx_free( li->li_tls.sb_tls_ctx );
+                       li->li_tls.sb_tls_ctx = NULL;
+               }
                break;
 
        case LDAP_BACK_CFG_ACL_AUTHCDN:
@@ -1867,6 +1875,10 @@ done_url:;
                        }
                }
                bindconf_tls_defaults( &li->li_acl );
+               if ( li->li_acl.sb_tls_ctx ) {
+                       ldap_pvt_tls_ctx_free( li->li_acl.sb_tls_ctx );
+                       li->li_acl.sb_tls_ctx = NULL;
+               }
                break;
 
        case LDAP_BACK_CFG_IDASSERT_MODE: