https://bugs.openldap.org/show_bug.cgi?id=10176
--- Comment #2 from Howard Chu hyc@openldap.org --- Since you've already found ITS#9952 I suggest you revert the patch listed there in your build.
Probably we should also revert that change and pursue a fix in the OpenSSL library instead, but there's little chance they will do the right thing.