| lh | 9ed821d | 2023-04-07 01:36:19 -0700 | [diff] [blame^] | 1 | # Example configuration file |
| 2 | # Port to listen on | ||||
| 3 | Port = 4433 | ||||
| 4 | # Disable TLS v1.2 for test. | ||||
| 5 | # Protocol = ALL, -TLSv1.2 | ||||
| 6 | # Only support 3 curves | ||||
| 7 | Curves = P-521:P-384:P-256 | ||||
| 8 | # Restricted signature algorithms | ||||
| 9 | SignatureAlgorithms = RSA+SHA512:ECDSA+SHA512 | ||||
| 10 | Certificate=server.pem | ||||
| 11 | PrivateKey=server.pem | ||||
| 12 | ChainCAFile=root.pem | ||||
| 13 | VerifyCAFile=root.pem | ||||
| 14 | |||||
| 15 | # Request certificate | ||||
| 16 | VerifyMode=Request | ||||
| 17 | ClientCAFile=root.pem | ||||