From dc2f74aecdeabd208196fa9730f11c5bd0e13634 Mon Sep 17 00:00:00 2001
From: Marc Beninca <marc-beninca@rwx.work>
Date: Mon, 5 Aug 2019 10:42:57 +0200
Subject: [PATCH] openssl/ciphers/suites

---
 in/public/security/openssl/index.rst | 14 ++++++++++++--
 1 file changed, 12 insertions(+), 2 deletions(-)

diff --git a/in/public/security/openssl/index.rst b/in/public/security/openssl/index.rst
index 9f926a5..fa80901 100644
--- a/in/public/security/openssl/index.rst
+++ b/in/public/security/openssl/index.rst
@@ -2,8 +2,8 @@
 OpenSSL
 #######
 
-Select secure ciphers
-=====================
+List secure ciphers
+===================
 
 .. code:: shell
 
@@ -13,6 +13,16 @@ Select secure ciphers
  | grep --invert-match "\(DSA\|PSK\)" \
  | grep "\(POLY1305\|GCM\)"
 
+Select cipher suites
+====================
+
+* /etc/ssl/openssl.cnf
+
+::
+
+ [system_default_sect]
+ CipherSuites = TLS_CHACHA20_POLY1305_SHA256:TLS_AES_256_GCM_SHA384:TLS_AES_128_GCM_SHA256
+
 List curves
 ===========