On 5/6/21 9:30 PM, Howard Chu wrote: > With this patch > https://git.openldap.org/openldap/openldap/-/commit/cd3567d750b653949e50b6245428e594dff1d8a4 > the above problem will no longer occur.> That is, if your ciphersuite doesn't > contain any TLS1.3 ciphers, then > the existing TLS1.3 ciphersuites will not be changed. So you'll get > the compiled-in defaults if nothing else was changed. That means you > can continue to use old configs without any further changes.
That's helpful and will avoid lots of questions on the mailing lists. Ciao, Michael.