diff --git a/config/openssl.conf b/config/openssl.conf
index adfa225f64..39124fe2f1 100644
--- a/config/openssl.conf
+++ b/config/openssl.conf
@@ -2,6 +2,7 @@ openssl_conf = openssl_init
 
 [openssl_init]
 providers = provider_sect
+ssl_conf = ssl_sect
 
 [provider_sect]
 default = default_sect
@@ -12,3 +13,11 @@ activate = 1
 
 [legacy_sect]
 activate = 1
+
+[ssl_sect]
+system_default = system_default_sect
+
+[system_default_sect]
+MinProtocol = SSLv3
+CipherString = ALL:@SECLEVEL=0
+Options = UnsafeLegacyRenegotiation