capath = /etc/ssl/certs
ciphers = HIGH:kEDH:-AES128:!3DES:!DES:!CAMELLIA128:!aNULL:!MD5:!SEED:!ECDH:!PSK:!DSS
tlsv1.2
fail
compressed
remote-time
location