浏览代码

SSL最低要求v1.2

陈国伟 4 年之前
父节点
当前提交
384757b9f5

+ 6 - 4
FastGithub.ReverseProxy/KestrelServerOptionsExtensions.cs

@@ -8,6 +8,7 @@ using System;
 using System.Linq;
 using System.Linq;
 using System.Net;
 using System.Net;
 using System.Net.NetworkInformation;
 using System.Net.NetworkInformation;
+using System.Security.Authentication;
 
 
 namespace FastGithub
 namespace FastGithub
 {
 {
@@ -61,10 +62,11 @@ namespace FastGithub
             certService.CreateCaCertIfNotExists();
             certService.CreateCaCertIfNotExists();
             certService.InstallAndTrustCaCert();
             certService.InstallAndTrustCaCert();
 
 
-            kestrel.Listen(IPAddress.Any, HTTPS_PORT, listen =>
-                listen.UseHttps(https =>
-                    https.ServerCertificateSelector = (ctx, domain) =>
-                        certService.GetOrCreateServerCert(domain)));
+            kestrel.Listen(IPAddress.Any, HTTPS_PORT, listen => listen.UseHttps(https =>
+            {
+                https.SslProtocols = SslProtocols.Tls12 | SslProtocols.Tls13;
+                https.ServerCertificateSelector = (ctx, domain) => certService.GetOrCreateServerCert(domain);
+            }));
         }
         }
 
 
         /// <summary>
         /// <summary>

+ 1 - 1
FastGithub.ReverseProxy/RequestLoggingMilldeware.cs

@@ -60,7 +60,7 @@ namespace FastGithub.ReverseProxy
             }
             }
             else
             else
             {
             {
-                this.logger.LogError($"{message}{Environment.NewLine}{exception}");
+                this.logger.LogError($"{message}{Environment.NewLine}{exception.Message}");
             }
             }
         }
         }
     }
     }