.include /etc/ssl/openssl.cnf [evp_properties] rh-allow-sha1-signatures = yes