How to force openldap to use TLSv1?

huican <[email protected]> Wed, 17 Feb 2010 12:12:05 -0800 (PST)
Newsgroups gmane.comp.mozilla.devel.directory
Organization http://groups.google.com
Message-ID <[email protected]>
Hello,

A dummy question..

Can I force the openldap to use the TLSv1 when doing SSL connection?

I tried to add the line such as: TLSCipherSuite TLSv1+RSA in
slapd.conf (and also tried to add it on ldap.conf for ldapsearch), but
it doesn't take effect, and it seems always use the SSLv3?

....
TLS trace: SSL_accept:SSLv3 read client hello A
TLS trace: SSL_accept:SSLv3 write server hello A
TLS trace: SSL_accept:SSLv3 write certificate A
TLS trace: SSL_accept:SSLv3 write server done A

Anywhere else I should config it?