From bded736fa68b5801ea428577ae870f1ecfc4956c Mon Sep 17 00:00:00 2001 From: Quanah Gibson-Mount <quanah@openldap.org> Date: Mon, 26 Jan 2009 22:32:04 +0000 Subject: [PATCH] Copy slapd.conf(5) cipher suite notes to here --- doc/man/man5/ldap.conf.5 | 12 ++++++++++++ 1 file changed, 12 insertions(+) diff --git a/doc/man/man5/ldap.conf.5 b/doc/man/man5/ldap.conf.5 index 13dffe84aa..cd3f6c340d 100644 --- a/doc/man/man5/ldap.conf.5 +++ b/doc/man/man5/ldap.conf.5 @@ -323,6 +323,18 @@ it is of critical importance that the key file is protected carefully. Specifies acceptable cipher suite and preference order. <cipher-suite-spec> should be a cipher specification for OpenSSL, e.g., HIGH:MEDIUM:+SSLv2. + +To check what ciphers a given spec selects, use: + +.nf + openssl ciphers -v <cipher-suite-spec> +.fi + +To obtain the list of ciphers in GNUtls use: + +.nf + gnutls-cli -l +.fi .TP .B TLS_RANDFILE <filename> Specifies the file to obtain random bits from when /dev/[u]random is -- GitLab