Howard Chu hyc@symas.com wrote:
a) a way to specify another certificate to use in the syncrepl config
In OpenLDAP 2.4, yes. Read the manpage.
With 2.3, if a different cn is needed for the ldaps server and the syncrepl client, a certificate with subjectAltName may help.