From: Howard Chu <hyc@openldap.org>
Date: Mon, 26 Jan 2009 02:54:32 +0000 (+0000)
Subject: Copy slapd.conf(5) cipher suite notes to here
X-Git-Tag: ACLCHECK_0~954
X-Git-Url: https://git.sur5r.net/?a=commitdiff_plain;h=29bf788d1e018c53b691b31c654ac001c3fd26f6;p=openldap

Copy slapd.conf(5) cipher suite notes to here
---

diff --git a/doc/man/man5/ldap.conf.5 b/doc/man/man5/ldap.conf.5
index 13dffe84aa..cd3f6c340d 100644
--- a/doc/man/man5/ldap.conf.5
+++ b/doc/man/man5/ldap.conf.5
@@ -323,6 +323,18 @@ it is of critical importance that the key file is protected carefully.
 Specifies acceptable cipher suite and preference order.
 <cipher-suite-spec> should be a cipher specification for OpenSSL,
 e.g., HIGH:MEDIUM:+SSLv2.
+
+To check what ciphers a given spec selects, use:
+
+.nf
+	openssl ciphers -v <cipher-suite-spec>
+.fi
+
+To obtain the list of ciphers in GNUtls use:
+
+.nf
+	gnutls-cli -l
+.fi
 .TP
 .B TLS_RANDFILE <filename>
 Specifies the file to obtain random bits from when /dev/[u]random is