{
 my $tlsPolicy = $tls{'policy'} || '0';
 if ($tlsPolicy >= 20180621 && $tlsPolicy <= 20181001) {
    $OUT .= q(

# Cipher selection 2018-06-21
# Only TLS1.2 cipher (RSA and ECC certificate)

SSLCipherSuite EDH+aRSA+AES256:EECDH+aRSA+AES256:ECDHE-ECDSA-AES256-GCM-SHA384:\
ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:\
ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256

SSLProtocol All -SSLv2 -SSLv3
);
 }
}
