# SSL Server Key Certificate
;CertFile = :ETCDIR:/ssl/server-cert.pem
- # Select cipher suites allowed for SSL/TLS connections (OpenSSL only).
- # This defaults to the empty string, so all supported ciphers are
- # allowed. Please see 'man 1ssl ciphers' for details.
- # The example below only allows "high strength" cipher suites, disables
- # the ones without authentication, and sorts by strength:
+ # Select cipher suites allowed for SSL/TLS connections. This defaults
+ # to the empty string, so all supported ciphers are allowed. Please
+ # see 'man 1ssl ciphers' (OpenSSL) and 'man 3 gnutls_priority_init'
+ # (GnuTLS) for details.
+ # For example, this setting allows only "high strength" cipher suites,
+ # disables the ones without authentication, and sorts by strength:
+ # For OpenSSL:
;CipherList = HIGH:!aNULL:@STRENGTH
+ # For GnuTLS:
+ ;CipherList = SECURE128
# Diffie-Hellman parameters
;DHFile = :ETCDIR:/ssl/dhparams.pem