make it work on debian12

2025-05-13 13:54:40 +02:00
parent 2c8c7c8c73
commit 4b0312e471
8 changed files with 68 additions and 55 deletions
--- a/templates/ssl.ldif
+++ b/templates/ssl.ldif
@@ -3,15 +3,18 @@ changetype: modify
 replace: olcTLSCertificateFile
 olcTLSCertificateFile: {{ ldap_ssl_cert_path }}
 -
+replace: olcTLSCACertificatePath
+olcTLSCACertificatePath: /etc/ssl/certs
+-
 replace: olcTLSCertificateKeyfile
 olcTLSCertificateKeyfile: {{ ldap_ssl_key_path }}
 -
-replace: olcTLSCipherSuite
-olcTLSCipherSuite: TLSv1+RSA:!NULL
+replace: olcTLSProtocolMin
+olcTLSProtocolMin: 3.3
 -
 replace: olctlsverifyclient
 olctlsverifyclient: never
 -
 replace: olctlscacertificatefile
-olctlscacertificatefile: {{ ldap_ssl_cacert_path }}
+olctlscacertificatefile: {{ ldap_ssl_cert_path }}