disable ssl weak chiper TLS_RSA_WITH_SEED_CBC_SHA to fix issue ZLMedi…

…aKit/ZLMediaKit#3979
ZLMediaKit · Oct 26, 2024 · 73677cb · 73677cb
1 parent 08c094e
commit 73677cb
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/Util/SSLBox.cpp b/src/Util/SSLBox.cpp
@@ -192,7 +192,7 @@ void SSL_Initor::setupCtx(SSL_CTX *ctx) {
     //加载默认信任证书  [AUTO-TRANSLATED:4d98f092]
     //Load default trusted certificate
     SSLUtil::loadDefaultCAs(ctx);
-    SSL_CTX_set_cipher_list(ctx, "ALL:!ADH:!LOW:!EXP:!MD5:!3DES:!DES:!IDEA:!RC4:@STRENGTH");
+    SSL_CTX_set_cipher_list(ctx, "ALL:!ADH:!LOW:!EXP:!MD5:!3DES:!DES:!IDEA:!RC4:!SEED-SHA:@STRENGTH");
     SSL_CTX_set_verify_depth(ctx, 9);
     SSL_CTX_set_mode(ctx, SSL_MODE_AUTO_RETRY);
     SSL_CTX_set_session_cache_mode(ctx, SSL_SESS_CACHE_OFF);