update… this advice (quoted below) ended up being the simplest path to take.  
Please note on none of my DS was nsTLS1 an existing attribute so I had to add 
this attribute to the cn=encryption,cn=config object.  I had to do a “service 
dirsrv restart” as doing a restart from console would only stop but not start 
(i haven’t had time to figure out why this was the case but i suspect it had 
something to do with interactions with the admin server and a change of SSL 
types on the DS).

Thanks so much for the quick and extremely useful advice.

/mrg

On Oct 15, 2014, at 3:20 PM, Rich Megginson <[email protected]> wrote:

> You might be able to just set nsSSL2: off and nsSSL3: off and nsTLS1: on

--
389 users mailing list
[email protected]
https://admin.fedoraproject.org/mailman/listinfo/389-users

Reply via email to