[Issue 10403] Add a configuration directive that uses the OpenSSL CONF API to allow openldap config files to set any configuration supported by that API, and to get new OpenSSL configuration capabilities through that API with no changes in openldap.

https://bugs.openldap.org/show_bug.cgi?id=10403

--- Comment #9 from stephen.wall@redcom.com --- (In reply to Howard Chu from comment #7)

I don't see any provision for deleting individual values from the configs in bconfig.c. That needs to be addressed.

I'm not really sure what you're asking for. There are no defaults set for the openssl_conf setting in bconfig.c. The OPENSSL_CONF API itself supports removing many setting by prepending a minus ('-'). For example, passing "Protocol -TLSv1" will remove TLS 1.0 from the protocols supported during the handshake. All of the openssl_conf settings are all applied to the SSL_CTX created in libraries/libldap/tls_o.c, which is used to create the SSL sessions.