bugfix: TSG-8003 预防证书链投毒

* 中间证书缓存openssl rebuild trust chain中可惜的中间证书, 不缓存服务端发送证书链中的证书
2021-11-02 22:27:56 +08:00
parent f84e993217
commit cb15d3340f
6 changed files with 82 additions and 18 deletions
--- a/conf/tfe/tfe.conf
+++ b/conf/tfe/tfe.conf
@@ -52,7 +52,7 @@ timeout_cnt_as_fail=3
 timeout_debug=0

 [ssl]
-ssl_ja3_debug=0
+ssl_debug=0
 ssl_ja3_table=PXY_SSL_FINGERPRINT
 # ssl version Not available, configured via TSG website
 # ssl_max_version=tls13