update… this advice (quoted below) ended up being the simplest path to take. Please note
on none of my DS was nsTLS1 an existing attribute so I had to add this attribute to the
cn=encryption,cn=config object. I had to do a “service dirsrv restart” as doing a restart
from console would only stop but not start (i haven’t had time to figure out why this was
the case but i suspect it had something to do with interactions with the admin server and
a change of SSL types on the DS).
Thanks so much for the quick and extremely useful advice.
/mrg
On Oct 15, 2014, at 3:20 PM, Rich Megginson <rmeggins(a)redhat.com> wrote:
You might be able to just set nsSSL2: off and nsSSL3: off and nsTLS1:
on