Take the 2-minute tour ×  I'm trying to enable SSL connections
on an OpenLDAP 2.4.23 server, but all the instructions I find
only discuss the old slapd.conf configuration. Can anyone point
to some instructions for setting it up under cn=config?
share|improve this question  1 Answer 1  up vote 0 down vote
accepted  Here's whats working so far, though I could still use
a guide to tuning the security settings under cn=config:  Follow
the instructions here to create the certificate, added the tls
attributes to cn=config (last two were set by default)
olcTLSCertificateFile /certs/ldapscert.pem
olcTLSCertificateKeyFile /certs/keys/ldapskey.pem
olcTLSCipherSuite TLSV1+RSA:!NULL olcTLSCRLCheck none
olcTLSVerifyClient never  start server using
/usr/local/libexec/slapd -F slapd.d -h ldaps:///  This lets me
connect from Apache Directory Studio using ldaps, but isn't
working for linux logins.  share|improve this answer Had to
generate a certificate with alt-subject-names for both ldap
servers and the meta-server name a