Configure TLS/SSL for OpenLDAP

[mb-wali]

📌 Issue: Configure TLS/SSL for OpenLDAP

✅ Goal

Encrypt LDAP traffic to ensure secure communication between clients and the OpenLDAP server, protecting against credential or data interception.

---

🧩 Tasks

• TLS certificates

  • (e.g., Let's Encrypt) (only QA) - for prod make sure the path already has the TLS.

• Set secure file permissions

  • Ensure certs are readable only by the openldap user
  • Example:

    chown openldap:openldap /etc/ssl/openlda