Re: StartTLS in LDAP?

Nelson Bolyard wrote:
> LDAP gurus:
> 
> Does LDAP have an equivalent of IMAP/POP/SMTP's StartTLS feature,
> whereby a connection on a "normal" (non-SSL) port negotiates that it
> will begin to use SSL/TLS, and then does begin to use it, on that same
> connection, without opening a new connection on a new port?

yes, here is related public api that we have implemented
http://mxr.mozilla.org/mozilla/source/directory/c-sdk/ldap/include/ldap_ssl.h#75

> If so, in what RFC or other document is it defined, and by what name is
> it known?

RFC 2830 Lightweight Directory Access Protocol (v3): Extension for 
Transport Layer Security