Skip to content

Instantly share code, notes, and snippets.

@selvanair

selvanair/openssl.cnf

Created November 28, 2025 21:56
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save selvanair/4860fbf97664255ba6390712c5fc39bf to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save selvanair/4860fbf97664255ba6390712c5fc39bf to your computer and use it in GitHub Desktop.
Download ZIP
Restrct signature algorithms in OpenSSL
Raw
openssl.cnf
# This is only a snippet of the openssl.cnf file
# showing how to restrict signature algorithms
openssl_conf = default_conf
[default_conf]
ssl_conf = ssl_sect
[ssl_sect]
system_default = system_default_sect
[system_default_sect]
SignatureAlgorithms = RSA+SHA256:RSA+SHA384:RSA+SHA512:ECDSA+SHA256:ECDSA+SHA384:ECDSA+SHA512
# add more algorithms if required
# Example use case: TLS 1.2 with a hardware token that has no support for RSA-PSS signature
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment