On 5/6/21 9:30 PM, Howard Chu wrote:
With this patch https://git.openldap.org/openldap/openldap/-/commit/cd3567d750b653949e50b624... the above problem will no longer occur.> That is, if your ciphersuite doesn't contain any TLS1.3 ciphers, then the existing TLS1.3 ciphersuites will not be changed. So you'll get the compiled-in defaults if nothing else was changed. That means you can continue to use old configs without any further changes.
That's helpful and will avoid lots of questions on the mailing lists.
Ciao, Michael.