Replication and StartTLS (OpenLDAP 2.0.7)

[Jeff Costlow <j.costlow@f5.com>]

So I just got around to setting up replication, and it all works fine (hint, in slapd.conf put the updatedn, updateref, replica and replogfile directives _under_ the database that you want to replicate, not above).

But I just realized that slurpd will be sending updates on an unencrypted channel (since I have been preferring StartTLS over a seperate SSL port).  Is there a way I can tell slurpd to StartTLS before shoving the update down the pipe?  It doesn't appear in the docs anywhere I can see.

Can anyone help me out?  Thanks.