
TLSCipherSuite         { $ldap{CipherSuite} || $modSSL{CipherSuite} || 'HIGH:!SSLv2:!ADH:!aNULL:!MD5:!RC4' }
TLSProtocolMin         { ($ldap{SSLv3} || 'disabled') eq 'enabled' ? '3.0' : '3.1' }
TLSCACertificateFile   /var/service/ldap/ssl/slapd.pem
TLSCertificateFile     /var/service/ldap/ssl/slapd.pem
TLSCertificateKeyFile  /var/service/ldap/ssl/slapd.pem
TLSVerifyClient        never

