禁用RC4密码套件 (#231)

由于sslport端口扫出了使用RC4不安全密码套件漏洞，故此禁用
ZLMediaKit · Jun 9, 2024 · 5144e2a · 5144e2a
1 parent 14fae83
commit 5144e2a
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/Util/SSLBox.cpp b/src/Util/SSLBox.cpp
@@ -184,7 +184,7 @@ void SSL_Initor::setupCtx(SSL_CTX *ctx) {
 #if defined(ENABLE_OPENSSL)
     //加载默认信任证书
     SSLUtil::loadDefaultCAs(ctx);
-    SSL_CTX_set_cipher_list(ctx, "ALL:!ADH:!LOW:!EXP:!MD5:!3DES:!DES:!IDEA:@STRENGTH");
+    SSL_CTX_set_cipher_list(ctx, "ALL:!ADH:!LOW:!EXP:!MD5:!3DES:!DES:!IDEA:!RC4:@STRENGTH");
     SSL_CTX_set_verify_depth(ctx, 9);
     SSL_CTX_set_mode(ctx, SSL_MODE_AUTO_RETRY);
     SSL_CTX_set_session_cache_mode(ctx, SSL_SESS_CACHE_OFF);