ldap: Disable SSLv3 and add list of ciphers to ldap::server.

ldap/manifests/init.pp

@@ -354,6 +354,7 @@ class ldap::client::ruby {
 class ldap::server {
 
     require ssl
+    include ssl::ciphersuites
 
     if !$ldap_server_key {
         $ldap_server_key = "${puppet_ssldir}/private_keys/${homename}.pem"

ldap/templates/slapd.conf.erb

@@ -43,6 +43,8 @@ TLSCertificateFile	<%= scope.lookupvar('ssl::certs') %>/slapd.crt
 TLSCertificateKeyFile	<%= scope.lookupvar('ssl::private') %>/slapd.key
 TLSCACertificatePath	<%= scope.lookupvar('ldap::server::config') %>/cacerts
 TLSVerifyClient		try
+TLSCipherSuite		<%= scope.lookupvar('ssl::ciphersuites::default_ciphersuites') %>
+TLSProtocolMin		3.1
 
 # include database configs
 include		<%= scope.lookupvar('ldap::server::config') %>/slapd.conf.d/database.conf