Comment by aliswe

I'd say your underlying problem is using TLS 1.1 and not updating your LDAP server, the version of which must also be too old. Wouldn't you agree that it's bad practice?