Describe LDAPS setup with self-signed certificate

[justusbunsi]

In the current documentation there is no guidance on how to handle LDAPS connections with self-signed certificates.

[zeripath]

#16376 (comment)

Add your certificate to a copy of the root certs file and set the SSL_CERT_FILE environment variable to the new file.

See: https://pkg.go.dev/crypto/[email protected]#SystemCertPool

and

https://cs.opensource.google/go/go/+/refs/tags/go1.16.6:src/crypto/x509/root_linux.go

(On linux that is. On windows and mac you need to add the new RootCA to the system pool.)

Unfortunately as far as I can see if we were to provide an option to set the trusted CAs, users would have to provide a file containing all root CAs.