1a6054fbfSspz# Example configuration file 2*b0d17251Schristos 3*b0d17251Schristos# Comment out the next line to ignore configuration errors 4*b0d17251Schristosconfig_diagnostics = 1 5*b0d17251Schristos 6a6054fbfSspz# Port to listen on 7a6054fbfSspzPort = 4433 8*b0d17251Schristos 9a6054fbfSspz# Disable TLS v1.2 for test. 10a6054fbfSspz# Protocol = ALL, -TLSv1.2 11a6054fbfSspz# Only support 3 curves 12a6054fbfSspzCurves = P-521:P-384:P-256 13*b0d17251Schristos 14a6054fbfSspz# Restricted signature algorithms 15a6054fbfSspzSignatureAlgorithms = RSA+SHA512:ECDSA+SHA512 16a6054fbfSspzCertificate=server.pem 17a6054fbfSspzPrivateKey=server.pem 18c7da899bSchristosChainCAFile=root.pem 19c7da899bSchristosVerifyCAFile=root.pem 20c7da899bSchristos 21c7da899bSchristos# Request certificate 22c7da899bSchristosVerifyMode=Request 23c7da899bSchristosClientCAFile=root.pem 24