{
 my $tlsPolicy = $tls{'policy'} || '0';

 if ($tlsPolicy >= 20200510) {
     $OUT .= q(
# cipher selection 2020-05-10 Only TLS1.2(RSA and ECC certificate)
SSLProtocol all -SSLv2 -SSLv3 -TLSv1 -TLSv1.1

SSLCipherSuite kEECDH:+kEECDH+SHA:kEDH:+kEDH+SHA:+kEDH+CAMELLIA:kECDH:+kECDH+SHA:kRSA:+kRSA+SHA:+kRSA+CAMELLIA:!aNULL:!eNULL:!SSLv2:!SSLv3:!RC4:!MD5:!DES:!EXP:!SEED:!IDEA:!3DES

SSLHonorCipherOrder on
SSLCompression Off
);
 }
}
