Currently I have implenented the starttls support for the LdapAuthorization Realm.

To achive this I did setup an 389 Directory Server on an centos 6.9 machine. I created a self signed certificate and integrated this on the server and imported in the private trust store on the client site. I enabled the starttls capability in the 389 Directory Server to test the starttls implementation.