[global]
override-mode = allowlist

[overrides]
secure-hash = STREEBOG-256
secure-hash = STREEBOG-512
tls-enabled-mac = AEAD
tls-enabled-mac = STREEBOG-256
tls-enabled-mac = STREEBOG-512
tls-enabled-mac = OMAC-MAGMA
tls-enabled-mac = OMAC-KUZNYECHIK
tls-enabled-mac = GOST28147-TC26Z-IMIT
secure-sig = GOSTR341001
secure-sig = GOSTR341012-256
secure-sig = GOSTR341012-512
secure-sig-for-cert = GOSTR341001
secure-sig-for-cert = GOSTR341012-256
secure-sig-for-cert = GOSTR341012-512
tls-enabled-cipher = GOST28147-TC26Z-CNT
tls-enabled-cipher = GOST28147-CPA-CFB
tls-enabled-cipher = MAGMA-CTR-ACPKM
tls-enabled-cipher = KUZNYECHIK-CTR-ACPKM
enabled-version = TLS1.3
enabled-version = TLS1.2
enabled-version = TLS1.1
enabled-version = TLS1.0
allow-rsa-pkcs1-encrypt = false
min-verification-profile = medium

[priorities]
SYSTEM=NONE
