Secure Sockets Layer (SSL) can be enabled to provide encrypted communications between an Open Directory Master, Replica, and the computers that access the LDAP directory domain. SSL uses a digital certificate to provide a certified identity for the servers. You can use a self-signed certificate or a certificate obtained from a certificate authority.
Read more: https://support.apple.com/en-us/HT201952
