| # Example configuration file | |
| # Comment out the next line to ignore configuration errors | |
| config_diagnostics = 1 | |
| # Port to listen on | |
| Port = 4433 | |
| # Disable TLS v1.2 for test. | |
| # Protocol = ALL, -TLSv1.2 | |
| # Only support 3 curves | |
| Curves = P-521:P-384:P-256 | |
| # Restricted signature algorithms | |
| SignatureAlgorithms = RSA+SHA512:ECDSA+SHA512 | |
| Certificate=server.pem | |
| PrivateKey=server.pem | |
| ChainCAFile=root.pem | |
| VerifyCAFile=root.pem | |
| # Request certificate | |
| VerifyMode=Request | |
| ClientCAFile=root.pem |