Initialize the TLS environment *after* reading the config files.

diff --git a/servers/slapd/main.c b/servers/slapd/main.c
index e9781c60bb9e2077f3e8f97b55d50cdcee0368e7..d3972ca0f1a0c0088d111bb97262a9d5c05c60c4 100644 (file)
--- a/servers/slapd/main.c
+++ b/servers/slapd/main.c
@@ -383,17 +383,17 @@ int main( int argc, char **argv )
                goto destroy;
        }
 
-#ifdef HAVE_TLS
-       ldap_pvt_tls_init();
-       ldap_pvt_tls_init_def_ctx();
-#endif
-
        if ( read_config( configfile ) != 0 ) {
                rc = 1;
                SERVICE_EXIT( ERROR_SERVICE_SPECIFIC_ERROR, 19 );
                goto destroy;
        }
 
+#ifdef HAVE_TLS
+       ldap_pvt_tls_init();
+       ldap_pvt_tls_init_def_ctx();
+#endif
+
        tcps = set_socket( inetd ? NULL : &bind_addr );
        if ( tcps == -1 )
                goto destroy;