anchor.diff:                  rsa_aes_256_cbc,
                   rsa_rc4_128
                  ]},
  -     {dhe_dss, [], [dhe_dss_3des_ede_cbc, 
  +     {dhe_dss, [], [dhe_dss_3des_ede_cbc,
                       dhe_dss_aes_128_cbc,
                       dhe_dss_aes_256_cbc]},
  -     %% {srp_rsa, [], [srp_rsa_3des_ede_cbc, 
  +     %% {srp_rsa, [], [srp_rsa_3des_ede_cbc,
        %%                srp_rsa_aes_128_cbc,
        %%                srp_rsa_aes_256_cbc]},
  -     %% {srp_dss, [], [srp_dss_3des_ede_cbc, 
  +     %% {srp_dss, [], [srp_dss_3des_ede_cbc,
        %%                srp_dss_aes_128_cbc,
        %%                srp_dss_aes_256_cbc]},
  -     %% {rsa_psk, [], [rsa_psk_3des_ede_cbc,                    
  +     %% {rsa_psk, [], [rsa_psk_3des_ede_cbc,
        %%                rsa_psk_rc4_128,
        %%                rsa_psk_aes_128_cbc,
        %%                rsa_psk_aes_256_cbc
        %%               ]},
        {dh_anon, [], [dh_anon_rc4_128,
  -                    dh_anon_3des_ede_cbc, 
  +                    dh_anon_3des_ede_cbc,
                       dh_anon_aes_128_cbc,
                       dh_anon_aes_128_gcm,
                       dh_anon_aes_256_cbc,
                       dh_anon_aes_256_gcm]},
  -     {ecdh_anon, [], [ecdh_anon_3des_ede_cbc, 
  +     {ecdh_anon, [], [ecdh_anon_3des_ede_cbc,
                         ecdh_anon_aes_128_cbc,
                         ecdh_anon_aes_256_cbc
  -                     ]}    
  -     %% {srp_anon, [], [srp_anon_3des_ede_cbc, 
  +                     ]}
  +     %% {srp_anon, [], [srp_anon_3des_ede_cbc,
        %%                 srp_anon_aes_128_cbc,
        %%                 srp_anon_aes_256_cbc]},
  -     %% {psk, [], [psk_3des_ede_cbc,                    
  +     %% {psk, [], [psk_3des_ede_cbc,
        %%            psk_rc4_128,
        %%            psk_aes_128_cbc,
        %%            psk_aes_128_ccm,
  
positive.code: init_certs(GroupName, Config) when GroupName == dhe_rsa;
                                     GroupName == ecdhe_rsa ->
      {ClientOpts, ServerOpts} = ssl_test_lib:make_rsa_cert_chains([{server_chain, ssl_test_lib:default_cert_chain_conf()},
                                                                    {client_chain, ssl_test_lib:default_cert_chain_conf()}], 
                                                                   Config, ""),
      [{tls_config, #{server_config => ServerOpts,
                      client_config => ClientOpts}} |
  
negative.code:                       ecdhe_rsa_chacha20_poly1305
                      ]},
       {ecdhe_1_3_rsa_cert, [], tls_1_3_cipher_suites()},
       {ecdhe_ecdsa, [],[ecdhe_ecdsa_rc4_128,
                         ecdhe_ecdsa_3des_ede_cbc,
                         ecdhe_ecdsa_aes_128_cbc,
                         ecdhe_ecdsa_aes_128_gcm,
                         ecdhe_ecdsa_aes_256_cbc,
  