CipherString = @SECLEVEL=2:kEECDH:kRSA:kEDH:kPSK:kDHEPSK:kECDHEPSK:kRSAPSK:-aDSS:-3DES:!DES:!RC4:!RC2:!IDEA:-SEED:!eNULL:!aNULL:!MD5:-SHA384:-CAMELLIA:-ARIA:-AESCCM8
Ciphersuites = TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_128_GCM_SHA256:TLS_AES_128_CCM_SHA256
TLS.MinProtocol = TLSv1.2
TLS.MaxProtocol = TLSv1.3
DTLS.MinProtocol = DTLSv1.2
DTLS.MaxProtocol = DTLSv1.2
SignatureAlgorithms = ?mldsa44:?mldsa65:?mldsa87:?p256_mldsa44:?rsa3072_mldsa44:?mldsa44_pss2048:?mldsa44_rsa2048:?mldsa44_ed25519:?mldsa44_p256:?mldsa44_bp256:?p384_mldsa65:?mldsa65_pss3072:?mldsa65_rsa3072:?mldsa65_p256:?mldsa65_bp256:?mldsa65_ed25519:?p521_mldsa87:?mldsa87_p384:?mldsa87_bp384:?mldsa87_ed448:?falcon512:?p256_falcon512:?rsa3072_falcon512:?falconpadded512:?p256_falconpadded512:?rsa3072_falconpadded512:?falcon1024:?p521_falcon1024:?falconpadded1024:?p521_falconpadded1024:?sphincssha2128fsimple:?p256_sphincssha2128fsimple:?rsa3072_sphincssha2128fsimple:?sphincssha2128ssimple:?p256_sphincssha2128ssimple:?rsa3072_sphincssha2128ssimple:?sphincssha2192fsimple:?p384_sphincssha2192fsimple:?sphincsshake128fsimple:?p256_sphincsshake128fsimple:?rsa3072_sphincsshake128fsimple:ECDSA+SHA256:ECDSA+SHA384:ECDSA+SHA512:ed25519:ed448:rsa_pss_pss_sha256:rsa_pss_pss_sha384:rsa_pss_pss_sha512:rsa_pss_rsae_sha256:rsa_pss_rsae_sha384:rsa_pss_rsae_sha512:RSA+SHA256:RSA+SHA384:RSA+SHA512:ECDSA+SHA224:RSA+SHA224
Groups = *?X25519MLKEM768:?x25519_mlkem768:?SecP256r1MLKEM768:?p256_mlkem768:?SecP384r1MLKEM1024:?p384_mlkem1024:?mlkem512:?x25519_mlkem512:?mlkem768:?x448_mlkem768:?p256_mlkem512:?mlkem1024:?p384_mlkem768:?p521_mlkem1024/*X25519:secp256r1:X448:secp521r1:secp384r1:ffdhe2048:ffdhe3072:ffdhe4096:ffdhe6144:ffdhe8192

[req]
default_bits = 2048

[openssl_init]
alg_section = evp_properties

[evp_properties]
rh-allow-sha1-signatures = no
