LDAP_OPT_X_TLS*

[Michael Ströder <michael@stroeder.com>]

HI!

Where can I find docs about the exact semantics of the
SSL/TLS-related constants defined in ldap.h and their proper use
with StartTLS or LDAP over SSL?

/* OpenLDAP TLS options */
#define LDAP_OPT_X_TLS                          0x6000
#define LDAP_OPT_X_TLS_CTX                      0x6001  /* SSL CTX
*/
#define LDAP_OPT_X_TLS_CACERTFILE       0x6002
#define LDAP_OPT_X_TLS_CACERTDIR        0x6003
#define LDAP_OPT_X_TLS_CERTFILE         0x6004
#define LDAP_OPT_X_TLS_KEYFILE          0x6005
#define LDAP_OPT_X_TLS_REQUIRE_CERT     0x6006
/* #define LDAP_OPT_X_TLS_PROTOCOL              0x6007 */
#define LDAP_OPT_X_TLS_CIPHER_SUITE     0x6008
#define LDAP_OPT_X_TLS_RANDOM_FILE      0x6009

#define LDAP_OPT_X_TLS_NEVER            0
#define LDAP_OPT_X_TLS_HARD             1
#define LDAP_OPT_X_TLS_DEMAND           2
#define LDAP_OPT_X_TLS_ALLOW            3
#define LDAP_OPT_X_TLS_TRY              4

Ciao, Michael.