One really minor thing.

I think, instead of this:

for (let ii = 0; ii < deniedCiphers.length; ii++)

it is better to use this format:

for (let cipher in deniedCiphers)

It is less human error-prone and easier to read in general.

The rest looks good! Ack

One really minor thing.
I think, instead of this:
for (let ii = 0; ii < deniedCiphers.length; ii++)

it is better to use this format:
for (let cipher in deniedCiphers)

I can not use that method because of the way I splice the current array and how I manipulate the index counter. I tried it, doesn't work correctly:

        for (let i = 0; i < availableCiphers.length; i++) {
            for (let ci = 0; ci < values.length; ci++) {
                if (availableCiphers[i] === values[ci]) {
                    availableCiphers.splice(i, 1);
                    i--;
                    break;
                }
            }
        }

The issue is where I do the "i--;", this does not work using your proposed method. So what happens is that the next element in availableCiphers gets skipped if we remove/splice the previous element. There is no way to rewind the index counter using "for in array".

Okay, I see... Then yeah, it doesn't make sense to change.

You have my full ack then!

389-ds-base is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in 389-ds-base's github repository.

This pull request has been cloned to Github as issue and is available here:
- https://github.com/389ds/389-ds-base/issues/3752

If you want to continue to work on the PR, please navigate to the github issue,
download the patch from the attachments and file a new pull request.

Thank you for understanding. We apologize for all inconvenience.