@@ -787,9 +787,9 @@ Parameters
**ldap_tls_ciphers** (string, optional ``NONE:+VERS-TLS1.2:+CTYPE-X509:+COMP-NULL:+SIGN-RSA-SHA256:+SIGN-RSA-SHA384:+SIGN-RSA-SHA512:+DHE-RSA:+ECDHE-RSA:+SHA256:+SHA384:+SHA512:+AEAD:+AES-128-GCM:+AES-256-GCM:+CHACHA20-POLY1305:+CURVE-ALL``)
.. warning::
Under Debian Buster, slapd will not use the DH parameters
generated by the role, but will instead use them to pick one of
the recommended DH parameters from `RFC-7919
Under Debian Bullseye and upwards, slapd will not use the DH
parameters generated by the role, but will instead use them to
pick one of the recommended DH parameters from `RFC-7919
<https://www.ietf.org/rfc/rfc7919.txt>`_. This is based on the
size of role-generated parameters.