Full_Name: kobi beifus
Version: 2.4.39
OS: Linux
URL: ftp://ftp.openldap.org/incoming/
Submission from: (NULL) (195.110.40.242)


An attempt to connect to an LDAP server using SSL after a previous connection
was made to LDAP without using SSL , or connecting to an LDAP server with a
different certificate will fail.

This issue happens with OpenLDAP version 2.4.20, and was fixed by adding:
        ldap_set_option(*ld, LDAP_OPT_X_TLS_PROTOCOL_MIN,
&tls_minimum_version);
        ldap_set_option(*ld, LDAP_OPT_X_TLS_CACERTFILE, path);
        ldap_set_option(*ld, LDAP_OPT_X_TLS_NEWCTX, &zero);

However, this doesn't work with OpenLDAP version 2.4.39.