[overrides]
insecure-hash = SHA256
insecure-hash = SHA384
insecure-hash = SHA512
insecure-hash = SHA3-256
insecure-hash = SHA3-384
insecure-hash = SHA3-512
insecure-hash = SHA1
insecure-hash = MD5
tls-disabled-mac = SHA1
tls-disabled-mac = SHA256
tls-disabled-mac = SHA384
tls-disabled-mac = SHA512
tls-disabled-mac = MD5
tls-disabled-group = GROUP-X25519
tls-disabled-group = GROUP-SECP256R1
tls-disabled-group = GROUP-SECP384R1
tls-disabled-group = GROUP-SECP521R1
tls-disabled-group = GROUP-X448
tls-disabled-group = GROUP-FFDHE2048
tls-disabled-group = GROUP-FFDHE3072
tls-disabled-group = GROUP-FFDHE4096
tls-disabled-group = GROUP-FFDHE6144
tls-disabled-group = GROUP-FFDHE8192
insecure-sig = RSA-MD5
insecure-sig = RSA-SHA1
insecure-sig = DSA-SHA1
insecure-sig = ECDSA-SHA1
insecure-sig = RSA-SHA224
insecure-sig = DSA-SHA224
insecure-sig = ECDSA-SHA224
insecure-sig = RSA-SHA256
insecure-sig = DSA-SHA256
insecure-sig = ECDSA-SHA256
insecure-sig = RSA-SHA384
insecure-sig = DSA-SHA384
insecure-sig = ECDSA-SHA384
insecure-sig = RSA-SHA512
insecure-sig = DSA-SHA512
insecure-sig = ECDSA-SHA512
insecure-sig = EDDSA-ED25519
insecure-sig = EDDSA-ED448
insecure-sig = RSA-PSS-SHA256
insecure-sig = RSA-PSS-SHA384
insecure-sig = RSA-PSS-SHA512
insecure-sig = RSA-PSS-RSAE-SHA256
insecure-sig = RSA-PSS-RSAE-SHA384
insecure-sig = RSA-PSS-RSAE-SHA512
insecure-sig-for-cert = rsa-sha1
insecure-sig-for-cert = dsa-sha1
insecure-sig-for-cert = ecdsa-sha1
tls-disabled-cipher = AES-256-GCM
tls-disabled-cipher = AES-256-CCM
tls-disabled-cipher = AES-128-GCM
tls-disabled-cipher = AES-128-CCM
tls-disabled-cipher = CHACHA20-POLY1305
tls-disabled-cipher = CAMELLIA-256-GCM
tls-disabled-cipher = CAMELLIA-128-GCM
tls-disabled-cipher = AES-256-CBC
tls-disabled-cipher = AES-128-CBC
tls-disabled-cipher = CAMELLIA-256-CBC
tls-disabled-cipher = CAMELLIA-128-CBC
tls-disabled-cipher = 3DES-CBC
tls-disabled-cipher = ARCFOUR-128
tls-disabled-cipher = GOST28147-TC26Z-CFB
tls-disabled-cipher = GOST28147-CPB-CFB
tls-disabled-cipher = GOST28147-CPC-CFB
tls-disabled-cipher = GOST28147-CPD-CFB
tls-disabled-kx = PSK
tls-disabled-kx = DHE-PSK
tls-disabled-kx = ECDHE-PSK
tls-disabled-kx = RSA-PSK
tls-disabled-kx = ECDHE-RSA
tls-disabled-kx = ECDHE-ECDSA
tls-disabled-kx = RSA
tls-disabled-kx = DHE-RSA
tls-disabled-kx = DHE-DSS
disabled-version = SSL3.0
disabled-version = DTLS1.2
disabled-version = DTLS1.0
min-verification-profile = medium

[priorities]
SYSTEM=NORMAL
