Finally got around to upgrading my OpenDS 2.2.0 to OpenDJ 2.4.3.
Clean upgrade - just followed https://wikis.forgerock.org/confluence/display/OPENDJ/OpenDJ+Installatio...
Only change I had to make was from
./bin/rebuild-index -i dn2id -b "dc=example,dc=com"
to
./bin/rebuild-index --rebuildAll -b "dc=example,dc=com"
I delegate my domains OpenID logins to myopenid.com - but I was having issues getting SSL certificate based login to work in safari.
There is one extra step that I seem to need to get this to work properly ...