A lot of arguments have been made for switching to OpenSSL, and I can think of some arguments that haven't even been made yet. I just wrote two OpenLDAP autopkgtests that interact with other packages to prove my merit as a knowledgeable contributor, even if I did just learn today the majority of what I know.
Debian Experimental is currently at the latest upstream release which is awesome. I think we should seize this opportunity and start staging changes in Experimental. I'll write some TLS autopkgtests, we'll rebuild reverse dependencies and see how they fare, it'll be great. If you want me to make these changes, I can prepare a Merge Request keeping them small. But I think someone who is more familiar with OpenLDAP besides libldap (my forte) should do that.
signature.asc
Description: This is a digitally signed message part