From 29bf788d1e018c53b691b31c654ac001c3fd26f6 Mon Sep 17 00:00:00 2001
From: Howard Chu <hyc@openldap.org>
Date: Mon, 26 Jan 2009 02:54:32 +0000
Subject: [PATCH] Copy slapd.conf(5) cipher suite notes to here

---
 doc/man/man5/ldap.conf.5 | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/doc/man/man5/ldap.conf.5 b/doc/man/man5/ldap.conf.5
index 13dffe84aa..cd3f6c340d 100644
--- a/doc/man/man5/ldap.conf.5
+++ b/doc/man/man5/ldap.conf.5
@@ -323,6 +323,18 @@ it is of critical importance that the key file is protected carefully.
 Specifies acceptable cipher suite and preference order.
 <cipher-suite-spec> should be a cipher specification for OpenSSL,
 e.g., HIGH:MEDIUM:+SSLv2.
+
+To check what ciphers a given spec selects, use:
+
+.nf
+	openssl ciphers -v <cipher-suite-spec>
+.fi
+
+To obtain the list of ciphers in GNUtls use:
+
+.nf
+	gnutls-cli -l
+.fi
 .TP
 .B TLS_RANDFILE <filename>
 Specifies the file to obtain random bits from when /dev/[u]random is
-- 
2.39.5