389-ds-base shipped with RHEL 6.9 introduces three new parameters: nsTLS10, nsTLS11, and nsTLS12. These parameters allow enabling/disabling individual TLS protocol versions. The parameters only exist in DS 9.1 and not in 10.
The update is now available on the Customer Portal.