xref: /freebsd/crypto/openssl/demos/bio/cmod.cnf (revision e0c4386e7e71d93b0edc0c8fa156263fc4a8b0b6)
1*e0c4386eSCy Schubert# Example config module configuration
2*e0c4386eSCy Schubert
3*e0c4386eSCy Schubert# Name supplied by application to CONF_modules_load_file
4*e0c4386eSCy Schubert# and section containing configuration
5*e0c4386eSCy Schuberttestapp = test_sect
6*e0c4386eSCy Schubert
7*e0c4386eSCy Schubert# Comment out the next line to ignore configuration errors
8*e0c4386eSCy Schubertconfig_diagnostics = 1
9*e0c4386eSCy Schubert
10*e0c4386eSCy Schubert[test_sect]
11*e0c4386eSCy Schubert# list of configuration modules
12*e0c4386eSCy Schubert
13*e0c4386eSCy Schubert# SSL configuration module
14*e0c4386eSCy Schubertssl_conf = ssl_sect
15*e0c4386eSCy Schubert
16*e0c4386eSCy Schubert[ssl_sect]
17*e0c4386eSCy Schubert# list of SSL configurations
18*e0c4386eSCy Schubertserver = server_sect
19*e0c4386eSCy Schubert
20*e0c4386eSCy Schubert[server_sect]
21*e0c4386eSCy Schubert# Only support 3 curves
22*e0c4386eSCy SchubertCurves = P-521:P-384:P-256
23*e0c4386eSCy Schubert# Restricted signature algorithms
24*e0c4386eSCy SchubertSignatureAlgorithms = RSA+SHA512:ECDSA+SHA512
25*e0c4386eSCy Schubert# Certificates and keys
26*e0c4386eSCy SchubertRSA.Certificate=server.pem
27*e0c4386eSCy SchubertECDSA.Certificate=server-ec.pem
28