From 65ee6735aac33b31ace1cc8242e9196cca7f207c Mon Sep 17 00:00:00 2001
From: anlicheng <244108715@qq.com>
Date: Sun, 3 May 2026 19:11:05 +0800
Subject: [PATCH] =?UTF-8?q?=E4=BF=AE=E6=94=B9=E8=AF=81=E4=B9=A6=E9=85=8D?=
 =?UTF-8?q?=E7=BD=AE?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 src/ssl/sdlan_ssl_server.erl | 14 ++++++++++++--
 1 file changed, 12 insertions(+), 2 deletions(-)

diff --git a/src/ssl/sdlan_ssl_server.erl b/src/ssl/sdlan_ssl_server.erl
index 08979c0..568cb65 100644
--- a/src/ssl/sdlan_ssl_server.erl
+++ b/src/ssl/sdlan_ssl_server.erl
@@ -31,12 +31,22 @@ start() ->
         shutdown => 2000,
         socket_opts => [
             binary,
+            {active, false},
             {nodelay, true},
             {backlog, Backlog},
             {port, Port},
+            {send_timeout, 30000},
+            {send_timeout_close, true},
             {certfile, CertFile},
-            {keyfile, KeyFile}
+            {keyfile, KeyFile},
+            {verify, verify_none},
+            {alpn_preferred_protocols, [<<"punchnet/1.0">>]},
+            {versions, ['tlsv1.3', 'tlsv1.2']},
+            {secure_renegotiate, true},
+            {reuse_sessions, true},
+            {honor_cipher_order, true},
+            {client_renegotiation, false}
         ]
     },
     {ok, Pid} = ranch:start_listener(ssl_server, ranch_ssl, TransOpts, sdlan_ssl_transport, Limits),
-    logger:debug("[sdlan_ssl_server] the ssl server start at: ~p, pid is: ~p", [Port, Pid]).
+    logger:debug("[sdlan_ssl_server] the ssl server start at: ~p, pid is: ~p", [Port, Pid]).
\ No newline at end of file