diff --git a/in/public/security/openssl/index.rst b/in/public/security/openssl/index.rst
index 9f926a5..fa80901 100644
--- a/in/public/security/openssl/index.rst
+++ b/in/public/security/openssl/index.rst
@@ -2,8 +2,8 @@
 OpenSSL
 #######
 
-Select secure ciphers
-=====================
+List secure ciphers
+===================
 
 .. code:: shell
 
@@ -13,6 +13,16 @@ Select secure ciphers
  | grep --invert-match "\(DSA\|PSK\)" \
  | grep "\(POLY1305\|GCM\)"
 
+Select cipher suites
+====================
+
+* /etc/ssl/openssl.cnf
+
+::
+
+ [system_default_sect]
+ CipherSuites = TLS_CHACHA20_POLY1305_SHA256:TLS_AES_256_GCM_SHA384:TLS_AES_128_GCM_SHA256
+
 List curves
 ===========