diff --git a/doc/man/man5/slapd.conf.5 b/doc/man/man5/slapd.conf.5 index dd6899bcea..2890db0fe6 100644 --- a/doc/man/man5/slapd.conf.5 +++ b/doc/man/man5/slapd.conf.5 @@ -1079,7 +1079,12 @@ is in the source code for Mozilla NSS in the file sslinfo.c in the structure Specifies the file that contains certificates for all of the Certificate Authorities that .B slapd -will recognize. +will recognize. The certificate for +the CA that signed the server certificate must be included among +these certificates. If the signing CA was not a top-level (root) CA, +certificates for the entire sequence of CA's from the signing CA to +the top-level CA should be present. Multiple certificates are simply +appended to the file; the order is not significant. .TP .B TLSCACertificatePath Specifies the path of a directory that contains Certificate Authority