{
 use esmith::ssl;
 $OUT =  "TLSCipherSuite         ". ( $ldap{CipherSuite} || $modSSL{CipherSuite} || $smeCiphers ) ."\n"; 
 my $TLSProtocolMin = ( (exists $ldap{'TLSProtocolMin'} ) && (exists $existingSSLprotos{$ldap{'TLSProtocolMin'}} ) ) ? SSLprotoLDAP($ldap{'TLSProtocolMin'}) : SSLprotoLDAP(); 
 $OUT .= "TLSProtocolMin         ". $TLSProtocolMin ."\n";
}
TLSCACertificateFile   /etc/openldap/ssl/slapd.pem
TLSCertificateFile     /etc/openldap//ssl/slapd.pem
TLSCertificateKeyFile  /etc/openldap/ssl/slapd.pem
TLSVerifyClient        never