1*e0c4386eSCy Schubert# Example configuration file 2*e0c4386eSCy Schubert 3*e0c4386eSCy Schubert# Comment out the next line to ignore configuration errors 4*e0c4386eSCy Schubertconfig_diagnostics = 1 5*e0c4386eSCy Schubert 6*e0c4386eSCy Schubert# Port to listen on 7*e0c4386eSCy SchubertPort = 4433 8*e0c4386eSCy Schubert 9*e0c4386eSCy Schubert# Disable TLS v1.2 for test. 10*e0c4386eSCy Schubert# Protocol = ALL, -TLSv1.2 11*e0c4386eSCy Schubert# Only support 3 curves 12*e0c4386eSCy SchubertCurves = P-521:P-384:P-256 13*e0c4386eSCy Schubert 14*e0c4386eSCy Schubert# Restricted signature algorithms 15*e0c4386eSCy SchubertSignatureAlgorithms = RSA+SHA512:ECDSA+SHA512 16*e0c4386eSCy SchubertCertificate=server.pem 17*e0c4386eSCy SchubertPrivateKey=server.pem 18*e0c4386eSCy SchubertChainCAFile=root.pem 19*e0c4386eSCy SchubertVerifyCAFile=root.pem 20*e0c4386eSCy Schubert 21*e0c4386eSCy Schubert# Request certificate 22*e0c4386eSCy SchubertVerifyMode=Request 23*e0c4386eSCy SchubertClientCAFile=root.pem 24