Double check that we provide constants for all supported OPT constants and have documentation for all of them. We might want to decide to NOT expose some constants, e.g. callbacks or getters that return raw C structures like OPT_X_TLS_CTX.

See http://man7.org/linux/man-pages/man3/ldap_get_option.3.html for an up to date list

missing / unsupported

• OPT_X_TLS_ECNAME
• OPT_X_TLS_PEERCERT
• OPT_X_TLS_PROTOCOL_SSL3
• OPT_X_TLS_PROTOCOL_TLS1_0
• OPT_X_TLS_PROTOCOL_TLS1_1
• OPT_X_TLS_PROTOCOL_TLS1_2
• OPT_X_TLS_PROTOCOL_TLS1_3

drop / don't support

• OPT_X_TLS_PROTOCOL_SSL2
• OPT_X_TLS_PROTOCOL_SSL3
• OPT_X_TLS_TRY makes no sense. It's only useful on the server side.
• OPT_X_TLS_CTX
• OPT_X_TLS is deprecated and no longer documented in OpenLDAP: https://www.openldap.org/lists/openldap-software/200409/msg00617.html
• OPT_X_*_CB (C callback)
• OPT_X_*_ARG (argument for C callback)