2013-10-18 15:28:38 +00:00
|
|
|
# Example configuration file
|
2013-10-20 21:21:09 +00:00
|
|
|
# Port to listen on
|
|
|
|
|
Port = 4433
|
2013-10-18 15:28:38 +00:00
|
|
|
# Disable TLS v1.2 for test.
|
|
|
|
|
# Protocol = ALL, -TLSv1.2
|
|
|
|
|
# Only support 3 curves
|
|
|
|
|
Curves = P-521:P-384:P-256
|
2013-10-20 21:21:09 +00:00
|
|
|
# Automatic curve selection
|
2013-10-18 15:28:38 +00:00
|
|
|
ECDHParameters = Automatic
|
|
|
|
|
# Restricted signature algorithms
|
|
|
|
|
SignatureAlgorithms = RSA+SHA512:ECDSA+SHA512
|
|
|
|
|
Certificate=server.pem
|
|
|
|
|
PrivateKey=server.pem
|
2015-07-14 13:19:38 +00:00
|
|
|
ChainCAFile=root.pem
|
|
|
|
|
VerifyCAFile=root.pem
|
|
|
|
|
|
|
|
|
|
# Request certificate
|
|
|
|
|
VerifyMode=Request
|
|
|
|
|
ClientCAFile=root.pem
|
