upstream/openldap
1
0
Fork 0
mirror of https://git.openldap.org/openldap/openldap.git synced 2026-01-06 23:19:59 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

ITS#5655 TLS_PROTOCOL_MIN setting

Browse source
This commit is contained in:
Philip Guenther 2013-07-29 06:38:27 -07:00 committed by Howard Chu
parent 4f4590f110
commit dcf97caf11
1 changed files with 13 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

13
doc/man/man5/ldap.conf.5
View file

@ -407,6 +407,19 @@ is in the source code for Mozilla NSS in the file sslinfo.c in the structure
.fi
.RE
.TP
.B TLS_PROTOCOL_MIN <major>[.<minor>]
Specifies minimum SSL protocol version that will be negoiated.
If the server doesn't support at least that version,
the SSL handshake will fail.
To require TLS 1.x or higher, set this option to 3.(x+1),
e.g.,
.B TLS_PROTOCOL_MIN 3.2
would require TLS 1.1.
Specifying a minimum that is higher than that supported by the
OpenLDAP implementation will result it in requiring the
highest level that it does support.
This parameter is currently ignored with GNUtls.
.TP
.B TLS_RANDFILE <filename>
Specifies the file to obtain random bits from when /dev/[u]random is
not available. Generally set to the name of the EGD/PRNGD socket.