TLS availability should check slapd's context not the default context.

diff --git a/servers/slapd/starttls.c b/servers/slapd/starttls.c
index ff164a4c61a178fa85713389b4de5401f564b1d9..11f2c0c917ead5a5a2eae31681d2fcb14c265508 100644 (file)
--- a/servers/slapd/starttls.c
+++ b/servers/slapd/starttls.c
@@ -77,9 +77,7 @@ starttls_extop ( Operation *op, SlapReply *rs )
        }
 
        /* fail if TLS could not be initialized */
-       if (ldap_pvt_tls_get_option( NULL, LDAP_OPT_X_TLS_CTX, &ctx ) != 0
-               || ctx == NULL)
-       {
+       if ( slap_tls_ctx == NULL ) {
                if (default_referral != NULL) {
                        /* caller will put the referral in the result */
                        rc = LDAP_REFERRAL;