diff --git a/openvpn3-core/openvpn/openssl/ssl/sslctx.hpp b/openvpn3-core/openvpn/openssl/ssl/sslctx.hpp
index 804ed39..df6ef73 100644
--- a/openvpn3-core/openvpn/openssl/ssl/sslctx.hpp
+++ b/openvpn3-core/openvpn/openssl/ssl/sslctx.hpp
@@ -1317,7 +1317,7 @@ class OpenSSLContext : public SSLFactoryAPI
 #endif
         std::string tls_cipher_list =
             /* default list as a basis */
-            "DEFAULT"
+            "PROFILE=SYSTEM"
             /* Disable export ciphers, low and medium */
             ":!EXP:!LOW:!MEDIUM"
             /* Disable static (EC)DH keys (no forward secrecy) */