dn: cn=config changetype: modify add: olcTLSCACertificateFile olcTLSCACertificateFile: /etc/ssl/certs/ca-certificates.crt - add: olcTLSCertificateKeyFile olcTLSCertificateKeyFile: /etc/ldap/ssl/{{ domain }}.key - add: olcTLSCertificateFile olcTLSCertificateFile: /etc/ldap/ssl/{{ domain }}.crt