mmhhh.. In summary : I manage to set up servers so that usual clients can use TLS to connect to the server (ldapsearch with -ZZ works)
Rebuild your OpenLDAP against OpenSSL, or get the latest 2.4.26 and the numerous patches to MozNSS since 2.4.26 was released, or wait until 2.4.27 is released.
--Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc. -------------------- Zimbra :: the leader in open source messaging and collaboration