always throw in tls_reqcert as it has a sane default

unlhcc · Dec 8, 2014 · a7e88f6 · a7e88f6
1 parent c5338f1
commit a7e88f6
Showing 1 changed file with 2 additions and 4 deletions.
diff --git a/templates/openldap-ldap.conf.erb b/templates/openldap-ldap.conf.erb
@@ -22,8 +22,6 @@
 URI <%= @uri %>
 BASE <%= @base %>
 
-<% if @tls_reqcert -%>
-<% if @tls_cacert -%>TLS_CACERT <%= @tls_cacert %><% end -%>
-<% if @tls_cacertdir -%>TLS_CACERTDIR <%= @tls_cacertdir %><% end -%>
+<% if @tls_cacert -%>TLS_CACERT <%= @tls_cacert %><% end %>
+<% if @tls_cacertdir -%>TLS_CACERTDIR <%= @tls_cacertdir %><% end %>
 TLS_REQCERT <%= @tls_reqcert %>
-<% end -%>