How to secure IBM SDS with TLS 1.2 and GSKit certificates 

IBM SDS was formerly known as IBM Tivoli Directory Server, or ITDS. We are using a self-signed X.509 SSL Certificate.
Here is the serverauth.ldif mentioned in the video:
serverauth.ldif
dn: cn=SSL, cn=Configuration
changetype: modify
replace: ibm-slapdSslAuth
ibm-slapdSslAuth: serverAuth
dn: cn=SSL, cn=Configuration
changetype: modify
replace: ibm-slapdSecurity
ibm-slapdSecurity: TLS
dn: cn=SSL, cn=Configuration
changetype: modify
replace: ibm-slapdSslKeyDatabase
ibm-slapdSslKeyDatabase: /home/dsrdbm01/keys/serverkey.kdb
dn: cn=SSL, cn=Configuration
changetype: modify
replace: ibm-slapdSslCertificate
ibm-slapdSslCertificate: serverlabel
dn: cn=SSL, cn=Configuration
changetype: modify
replace: ibm-slapdSslCipherSpec
ibm-slapdSslCipherSpec: AES
dn: cn=SSL, cn=Configuration
changetype: modify
replace: ibm-slapdSecurityProtocol
ibm-slapdSecurityProtocol: TLS12
dn: cn=SSL, cn=Configuration
changetype: modify
add: ibm-slapdSSLExtSigalg
ibm-slapdSSLExtSigalg: GSK_TLS_SIGALG_ECDSA_WITH_SHA512