修改证书配置

src/ssl/sdlan_ssl_server.erl

@@ -31,12 +31,22 @@ start() ->
         shutdown => 2000,
         socket_opts => [
             binary,
+            {active, false},
             {nodelay, true},
             {backlog, Backlog},
             {port, Port},
+            {send_timeout, 30000},
+            {send_timeout_close, true},
             {certfile, CertFile},
-            {keyfile, KeyFile}
+            {keyfile, KeyFile},
+            {verify, verify_none},
+            {alpn_preferred_protocols, [<<"punchnet/1.0">>]},
+            {versions, ['tlsv1.3', 'tlsv1.2']},
+            {secure_renegotiate, true},
+            {reuse_sessions, true},
+            {honor_cipher_order, true},
+            {client_renegotiation, false}
         ]
     },
     {ok, Pid} = ranch:start_listener(ssl_server, ranch_ssl, TransOpts, sdlan_ssl_transport, Limits),
-    logger:debug("[sdlan_ssl_server] the ssl server start at: ~p, pid is: ~p", [Port, Pid]).
+    logger:debug("[sdlan_ssl_server] the ssl server start at: ~p, pid is: ~p", [Port, Pid]).