update… this advice (quoted below) ended up being the simplest path to take. Please note on none of my DS was nsTLS1 an existing attribute so I had to add this attribute to the cn=encryption,cn=config object. I had to do a “service dirsrv restart” as doing a restart from console would only stop but not start (i haven’t had time to figure out why this was the case but i suspect it had something to do with interactions with the admin server and a change of SSL types on the DS). Thanks so much for the quick and extremely useful advice. /mrg On Oct 15, 2014, at 3:20 PM, Rich Megginson <rmeggins@xxxxxxxxxx> wrote: You might be able to just set nsSSL2: off and nsSSL3: off and nsTLS1: on |
-- 389 users mailing list 389-users@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/389-users