From 5cea731d1b6f9504bd695fd2f201761c35f71a2c Mon Sep 17 00:00:00 2001
From: Stephen Gran <steve@lobefin.net>
Date: Sun, 2 Mar 2014 08:24:15 +0000
Subject: [PATCH] Revert "drop overrids - LDAP has it on its own"

This reverts commit 7476c73032e5755ecb80609734669a66cb8c8de4.
---
 Util.pm | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/Util.pm b/Util.pm
index 14fab61..27060d7 100644
--- a/Util.pm
+++ b/Util.pm
@@ -357,7 +357,10 @@ sub ReadConfigFile {
 
 sub UpgradeConnection($) {
   my ($ldap) = @_;
-  my $mesg = $ldap->start_tls();
+  my $mesg = $ldap->start_tls(
+                          verify => 'require',
+                          cafile => '/etc/ssl/certs/spi-cacert-2008.pem'
+                          );
   $mesg->sync;
   if ($mesg->code != LDAP_SUCCESS) {
     print "Content-type: text/html; charset=utf-8\n\n";
-- 
2.20.1