[paledot]

"Cut and paste the options from somewhere" is a questionable practice even when it's not part of a security-critical workflow. And yet I'd venture to say that most people who use OpenSSL do so with commands copy-pasted verbatim from the internet, specifically because of its obtuse complexity.

Set-and-forget still requires you to know what to set.

[Ekaros]

And leads to doing things with little of understanding how and why it actually works in the first place.

[paledot]

You presume that I can gain any insight at all by copy-pasting a series of arcane invocations from the internet.