9.5. Displaying the Encryption Protocols Enabled in Directory Server

To display the enabled encryption protocols in Directory Server:
# dsconf -D "cn=Directory Manager" ldap://server.example.com security get
sslversionmin: TLS1.2
sslversionmax: TLS1.3
The sslVersionMin and sslVersionMax parameter control which encryption protocol versions Directory Server uses. The default of sslVersionMin depends on the system-wide crypto policy you use.