Use rejectUnauthorized: conf.verifyTLSCertificate if no TLS is activated

Use rejectUnauthorized: conf.verifyTLSCertificate if no TLS is activated since ldaps could be used.

server/modules/authentication/ldap/authentication.js

@@ -75,11 +75,7 @@ module.exports = {
 }
 
 function getTlsOptions(conf) {
-  if (!conf.tlsEnabled) {
-    return {}
-  }
-
-  if (!conf.tlsCertPath) {
+  if (!conf.tlsEnabled || !conf.tlsCertPath) {
     return {
       rejectUnauthorized: conf.verifyTLSCertificate
     }