help on ssl authentication override, SSL Verify Depth, Cipher Suite etc

Hello,

I read through the doc about the c-sdk about the "connection over
ssl". It is not very detailed, and now I have some questions.

1:) And I am trying to let my ldap client (using c-sdk) to accept some
authentication cases, such as:
===========
  Certificate Has Expired.
  Allow Self Signed
  Certificate Not Yet Valid
  ...
Can the c-sdk allow me to override them?

2:) Also can NSS allow me to specify SSLVerifyDepth when
authentication the Cert from ldap server?

3:) How can I specify the Cipher Suites I want to use for the ssl
connection?

Thanks
Huican Ping