[Pkg-openldap-devel] Bug#616703: openldap: Add TLS_CACERT to default ldap.conf

[William Ono]

Package: libldap-2.4-2
Version: 2.4.23-7
Severity: minor

I expected the CA bundle managed by ca-certificates to be checked by
default. Please add TLS_CACERT /etc/ssl/certs/ca-certificates.crt to the
/etc/ldap/ldap.conf that is installed by this package.

This is especially compounded by Bug#555409, ldap-utils: Untrusted LDAP
server SSL certs result in misleading error message.

Thanks.

-- 
William Ono <debian at events.soundwave.net>