 for their great articles. This installation procedure wasn't as smooth as I 
 would expect so here's a recap.
 
-This is using the [OpenSSL](https://www.openssl.org/) library. Although not tested, 
-[Brad Chen](http://www.bradchen.com/blog/2012/08/openldap-tls-issue) wrote 
-a comprehensive tutorial on using the [Mozilla NSS](https://developer.mozilla.org/en/docs/NSS) tools.
+This is using the [OpenSSL](https://www.openssl.org/) library. Although not 
+tested, [Brad Chen](http://www.bradchen.com/blog/2012/08/openldap-tls-issue) 
+wrote a comprehensive tutorial on using the 
+[Mozilla NSS](https://developer.mozilla.org/en/docs/NSS) tools.
 
 We start by positioning ourself inside a new directory.
 

============

Note, by default, openldap comes with ldaps support. The default value are:   
*   olcTLSCACertificatePath: /etc/openldap/certs   
*   olcTLSCertificateFile: "OpenLDAP Server"   
*   olcTLSCertificateKeyFile: /etc/openldap/certs/password   
To test if TLS is configured, run `ldapsearch -LLLY EXTERNAL -H ldapi:/// -b cn=config -s base | grep -i tls`

Create a self-signed certificate

Email Address []:david@adaltas.com
```

Now prepare a configuration file "myca.conf" and substitute the properties 
"certificate", "database", "private_key", "serial" with their correct values.

```
[ ca ]
