What were you trying to do that didn't work?

Please provide the package NVR for which bug is seen:

How reproducible:

Steps to reproduce

1. ipa-migrate stage-mode remote.testrelm.test -D 'cn=Directory Manager' -w Secret123 -n -x -Z test.crt
2. test.crt is the CA certificate for the remote server

Expected results

-Z option should work without error.

Actual results

[root@remote log]# ipa-migrate stage-mode remote.testrelm.test -D 'cn=Directory Manager' -w Secret123 -n -x -Z test.crt
Initializing ...
Connecting to local server ...
IPA to IPA migration starting ...
Traceback (most recent call last):
  File "/usr/sbin/ipa-migrate", line 10, in <module>
    ipa_migrate.run()
  File "/usr/lib/python3.12/site-packages/ipaserver/install/ipa_migrate.py", line 2053, in run
    self.do_migration()
  File "/usr/lib/python3.12/site-packages/ipaserver/install/ipa_migrate.py", line 1879, in do_migration
    self.connect_to_remote_ds()
  File "/usr/lib/python3.12/site-packages/ipaserver/install/ipa_migrate.py", line 769, in connect_to_remote_ds
    ds_conn = LDAPClient(ldapuri, cacert=cacert, start_tls=True)
              ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/lib/python3.12/site-packages/ipapython/ipaldap.py", line 811, in {}init{}
    self._conn = self._connect()
                 ^^^^^^^^^^^^^^^
  File "/usr/lib/python3.12/site-packages/ipapython/ipaldap.py", line 1224, in _connect
    conn = ldap_initialize(self.ldap_uri, cacertfile=self._cacert)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/lib/python3.12/site-packages/ipapython/ipaldap.py", line 138, in ldap_initialize
    conn.set_option(ldap.OPT_X_TLS_NEWCTX, 0)
  File "/usr/lib64/python3.12/site-packages/ldap/ldapobject.py", line 698, in set_option
    return self._ldap_call(self._l.set_option,option,invalue)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/lib64/python3.12/site-packages/ldap/ldapobject.py", line 128, in _ldap_call
    result = func(args,*kwargs)
             ^^^^^^^^^^^^^^^^^^^^
ValueError: option error