[overrides]
insecure-hash = SHA1
insecure-hash = MD5
insecure-hash = STREEBOG-256
insecure-hash = STREEBOG-512
insecure-hash = GOSTR341194
tls-disabled-mac = MD5
tls-disabled-mac = STREEBOG-256
tls-disabled-mac = STREEBOG-512
tls-disabled-mac = GOST28147-TC26Z-IMIT
tls-disabled-group = GROUP-X25519
tls-disabled-group = GROUP-X448
tls-disabled-group = GROUP-GC256B
tls-disabled-group = GROUP-GC512A
insecure-sig = RSA-MD5
insecure-sig = RSA-SHA1
insecure-sig = DSA-SHA1
insecure-sig = ECDSA-SHA1
insecure-sig = DSA-SHA224
insecure-sig = DSA-SHA256
insecure-sig = DSA-SHA384
insecure-sig = DSA-SHA512
insecure-sig = EDDSA-ED25519
insecure-sig = EDDSA-ED448
insecure-sig = GOSTR341012-512
insecure-sig = GOSTR341012-256
insecure-sig = GOSTR341001
insecure-sig-for-cert = rsa-sha1
insecure-sig-for-cert = dsa-sha1
insecure-sig-for-cert = ecdsa-sha1
tls-disabled-cipher = CHACHA20-POLY1305
tls-disabled-cipher = CAMELLIA-256-GCM
tls-disabled-cipher = CAMELLIA-128-GCM
tls-disabled-cipher = CAMELLIA-256-CBC
tls-disabled-cipher = CAMELLIA-128-CBC
tls-disabled-cipher = 3DES-CBC
tls-disabled-cipher = ARCFOUR-128
tls-disabled-cipher = GOST28147-TC26Z-CFB
tls-disabled-cipher = GOST28147-CPA-CFB
tls-disabled-cipher = GOST28147-CPB-CFB
tls-disabled-cipher = GOST28147-CPC-CFB
tls-disabled-cipher = GOST28147-CPD-CFB
tls-disabled-cipher = GOST28147-TC26Z-CNT
tls-disabled-kx = RSA-PSK
tls-disabled-kx = RSA
tls-disabled-kx = DHE-DSS
tls-disabled-kx = VKO-GOST-12
disabled-version = SSL3.0
disabled-version = TLS1.0
disabled-version = TLS1.1
disabled-version = DTLS1.0
min-verification-profile = medium

[priorities]
SYSTEM=NORMAL