// tls 1.2 ciphers
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256         
TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256    
TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384         
TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384       
TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256  
TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 

// TLS 1.3 cipher suites.
TLS_AES_128_GCM_SHA256      
TLS_AES_256_GCM_SHA384      
TLS_CHACHA20_POLY1305_SHA256

openssl s_client -connect localhost:5000  -tls1_2 -cipher ECDHE-ECDSA-AES128-GCM-SHA256
CONNECTED(00000003)
140154879032320:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:ssl/record/ssl3_record.c:332:

no peer certificate available

No client certificate CA names sent

SSL handshake has read 5 bytes and written 142 bytes
Verification: OK

New, (NONE), Cipher is (NONE)
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
SSL-Session:
    Protocol  : TLSv1.2
    Cipher    : 0000
    Session-ID:
    Session-ID-ctx:
    Master-Key:
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    Start Time: 1726225539
    Timeout   : 7200 (sec)
    Verify return code: 0 (ok)
    Extended master secret: no