1*e7be843bSPierre Pronchery# Configuration file to test system default SSL configuration 2*e7be843bSPierre Pronchery 3*e7be843bSPierre Pronchery# We ignore configuration errors with config_diagnostics unset 4*e7be843bSPierre Pronchery# config_diagnostics = 1 5*e7be843bSPierre Pronchery 6*e7be843bSPierre Proncheryopenssl_conf = default_conf 7*e7be843bSPierre Pronchery 8*e7be843bSPierre Pronchery[ default_conf ] 9*e7be843bSPierre Pronchery 10*e7be843bSPierre Proncheryssl_conf = ssl_sect 11*e7be843bSPierre Proncheryoid_section = oid_sect 12*e7be843bSPierre Pronchery 13*e7be843bSPierre Pronchery[oid_sect] 14*e7be843bSPierre Proncherynew-sig-oid = 1.1.1.1.1.1.1.1.1.1.1.1.1.1 15*e7be843bSPierre Pronchery 16*e7be843bSPierre Pronchery[ssl_sect] 17*e7be843bSPierre Pronchery 18*e7be843bSPierre Proncherysystem_default = ssl_default_sect 19*e7be843bSPierre Pronchery 20*e7be843bSPierre Pronchery[ssl_default_sect] 21*e7be843bSPierre ProncherySignatureAlgorithms = RSA+SHA256:nonex 22*e7be843bSPierre ProncheryMaxProtocol = TLSv1.2 23*e7be843bSPierre ProncheryMinProtocol = TLSv1.2 24