diff -Nur e-smith-ldap-5.6.0/root/etc/e-smith/templates/etc/openldap/slapd.conf/12tls e-smith-ldap-5.6.0_bz10108/root/etc/e-smith/templates/etc/openldap/slapd.conf/12tls --- e-smith-ldap-5.6.0/root/etc/e-smith/templates/etc/openldap/slapd.conf/12tls 2013-02-13 16:21:49.000000000 +0100 +++ e-smith-ldap-5.6.0_bz10108/root/etc/e-smith/templates/etc/openldap/slapd.conf/12tls 2017-02-23 11:17:10.540389619 +0100 @@ -1,5 +1,6 @@ -TLSCipherSuite HIGH:MEDIUM:+SSLv2 +TLSCipherSuite { $ldap{CipherSuite} || $modSSL{CipherSuite} || 'HIGH:!SSLv2:!ADH:!aNULL:!MD5:!RC4' } +TLSProtocolMin { ($ldap{SSLv3} || 'disabled') eq 'enabled' ? '3.0' : '3.1' } TLSCACertificateFile /var/service/ldap/ssl/slapd.pem TLSCertificateFile /var/service/ldap/ssl/slapd.pem TLSCertificateKeyFile /var/service/ldap/ssl/slapd.pem