Projects/Enctype config enhancements
Provide a means of specifying inclusions and exclusions in the configuration variables that are lists of enctypes. At present, the only way to specify a non-default enctype list is to explicitly list every enctype. This means that a configuration file with such an explicit list will inherently become out of date when future software releases update the default enctype lists.
One example is
permitted_enctypes = DEFAULT +des-cbc-crc
permitted_enctypes = DEFAULT -arcfour-hmac
DEFAULT designates the default set of enctypes.
The OpenSSL cipher list format could be one option, but it is probably too complicated for this purpose.