In Debian 10, the upgraded OpenSSL package has more secure defaults (per https://wiki.debian.org/ContinuousIntegration/TriagingTips/openssl-1.1.1) which causes problems for some of my existing application configurations.
Changing /etc/ssl/openssl.cnf to use
CipherString = DEFAULT@SECLEVEL=1 keeps my old configurations working but of course that's a system-wide change.
What I am wondering is if it is possible to keep the system default of
CipherString = DEFAULT@SECLEVEL=2 and change this setting at a more granular level?
Specifically, I would like to change the setting on a per-site level in Apache if possible.