Editing HowTo's (section)

===== TLS bij ldap =====

 http://rustykruffle.com/tech-stuff/ubuntu/ultimate-home-server-ldap-gnutls-nightmare/

try

 ldd $(which slapd)

you may see, that slapd is build with gnutls and not openssl :-)

You have two different solutions to fix this:

1. use the tool certtool from gnutls in package gnutls-bin. doc is in 
gnutls-doc or use the doc from the qemu/kvm packages and look their for 
vnc.

2. create a copy of /etc/ssl/certs/cacert.pem and reorder your 
certificates. gnutls expects just the opposite order as openssl :-(

De oplossing:
    - Comment out TLSCipherSuite settings on upgrade from all versions prior
      to 2.4.7-5, and throw a debconf error to the user notifying them of
      this, since all OpenSSL cipher suite values are incompatible with
      GnuTLS.