https://bugs.openldap.org/show_bug.cgi?id=10094
--- Comment #7 from nikigen68@gmail.com --- With fix everything seems fine when only TLSv1.3 are used but the problem is when TLSv1.2 are there. It seems that all supported TLSv1.2 are in the list even though only few of them are in the configuration file.
For example: # cat /etc/openldap/ldap.conf # This configuration file is generated by semc REFERRALS no TIMEOUT 3 TLS_CIPHER_SUITE ECDHE-ECDSA-AES256-GCM-SHA384:TLS_AES_128_GCM_SHA256 TLS_PROTOCOL_MIN 3.3
# see attached cipher_list picture to see the wireshark output