More for privateKey tweak

Leave olcTLSCertificateKey as its own attr, not a subtype

diff --git a/servers/slapd/bconfig.c b/servers/slapd/bconfig.c
index 0e51528fb0da1ab07fc74247a3cb316e31146be9..88aa26b36a14c0d0f1581ac4af90a220642c0918 100644 (file)
--- a/servers/slapd/bconfig.c
+++ b/servers/slapd/bconfig.c
@@ -796,7 +796,8 @@ static ConfigTable config_back_cf_table[] = {
 #endif
                "( OLcfgGlAt:99 NAME 'olcTLSCertificateKey' "
                        "DESC 'X.509 privateKey, must use ;binary' "
-                       "SUP pKCS8PrivateKey SINGLE-VALUE )", NULL, NULL },
+                       "EQUALITY privateKeyMatch "
+                       "SYNTAX 1.2.840.113549.1.8.1.1 SINGLE-VALUE )", NULL, NULL },
        { "TLSCertificateKeyFile", NULL, 2, 2, 0,
 #ifdef HAVE_TLS
                CFG_TLS_CERT_KEY|ARG_STRING|ARG_MAGIC, &config_tls_option,