LDAP_OPT_X_TLS_CONNECT_CB and LDAP_OPT_X_TLS_CONNECT_ARG
with int (LDAP_TLS_CONNECT_CB) (LDAP *ld, SSL *ssl, SSL_CTX *ctx, void *arg)
To be called whenever the client library allocates a new SSL* handle.

all you want is the hostname.

in dn parameter and return a result code.

  deleted ldap_pvt_tls_get_peer()
  changed ldap_pvt_tls_get_peer_dn() to use ldap_X509dn2bv()
  added ldap_pvt_tls_get_my_dn()

Misc cleanup / lint removal

routines.

decrease dependency on dn_validate/dn_normalize

Clean up headers.

need to rework cert check to use per lconn host name

into ldap_pvt_ name space.

update bdb codes