# Your LDAP server needs to support StartTLS when you test StartTLS related
# feature. This is a LDIF file for OpenLDAP to do the configuration.
# You can use this file by the following command line on Debian GNU/Linux
# or Ubuntu:
#
#   % sudo usermod -a -G ssl-cert openldap
#   % sudo systemctl restart slapd
#   % sudo -H ldapmodify -Y EXTERNAL -H ldapi:/// -f test/enable-start-tls.ldif
#
# Adding the openldap user to the ssl-cert group is required to read
# certification related files.
version: 1
dn: cn=config
delete: olcTLSCACertificateFile
-
add: olcTLSCACertificateFile
olcTLSCACertificateFile: /etc/ssl/certs/ca-certificates.crt
-
delete: olcTLSCertificateKeyFile
-
add: olcTLSCertificateKeyFile
olcTLSCertificateKeyFile: /etc/ssl/private/ssl-cert-snakeoil.key
-
delete: olcTLSCertificateFile
-
add: olcTLSCertificateFile
olcTLSCertificateFile: /etc/ssl/certs/ssl-cert-snakeoil.pem
