diff --git a/PARR.AIHITRelationshipsSyncerWorker/Dockerfile b/PARR.AIHITRelationshipsSyncerWorker/Dockerfile
index 776be4ce..3c7eae02 100644
--- a/PARR.AIHITRelationshipsSyncerWorker/Dockerfile
+++ b/PARR.AIHITRelationshipsSyncerWorker/Dockerfile
@@ -32,17 +32,15 @@ FROM base AS final
 WORKDIR /app
 COPY --from=publish /app/publish .
 
-# Fixes an old version TLS (AIH IT GVC)
-# RUN sed -i 's/DEFAULT@SECLEVEL=2/DEFAULT@SECLEVEL=1/g' /etc/ssl/openssl.cnf
+	
+# 1. Принудительно настраиваем OpenSSL 3 на игнорирование непредвиденных EOF (UnsafeLegacyRenegotiation и IgnoreUnexpectedEOF)
+RUN sed -i 's/providers = provider_sect/providers = provider_sect\nssl_conf = ssl_sect/' /etc/ssl/openssl.cnf \
+    && printf "\n[ssl_sect]\nsystem_default = system_default_sect\n" >> /etc/ssl/openssl.cnf \
+    && printf "\n[system_default_sect]\nOptions = UnsafeLegacyRenegotiation,IgnoreUnexpectedEOF\nMinProtocol = TLSv1\nCipherString = DEFAULT@SECLEVEL=0\n" >> /etc/ssl/openssl.cnf
 
-# 1. Настройки для рантайма .NET 9 и SslStream (убираем блокировки)
+# 2. Оставляем глобальные переменные совместимости для самого рантайма .NET 9
 ENV DOTNET_AppContext_Switch_System_Net_Security_UseUnsafeOldTlsRuntimeBehavior=true
-ENV DOTNET_SYSTEM_NET_SECURITY_ALLOWUNSECUREDEFAULTS=true
-ENV DOTNET_AppContext_Switch_System_Net_Security_TlsSupport=3072
 ENV DOTNET_AppContext_Switch_Microsoft_Data_SqlClient_UseOldTlsValue=true
-
-# 2. Настройки для системного OpenSSL 3
-ENV OPENSSL_SYSTEM_DEFAULT_MIN_PROTOCOL=TLSv1
-ENV OPENSSL_SYSTEM_DEFAULT_CIPHER_STRING=DEFAULT@SECLEVEL=0
+ENV DOTNET_SYSTEM_NET_SECURITY_ALLOWUNSECUREDEFAULTS=true
 
 ENTRYPOINT ["dotnet", "PARR.AIHITRelationshipsSyncerWorker.dll"]
\ No newline at end of file