使用 --tls-cipher-list
【Using --tls-cipher-list】
你也可以使用命令行设置安全级别和加密算法,方法是使用 --tls-cipher-list=DEFAULT@SECLEVEL=X,如 修改默认的 TLS 密码套件 中所述。然而,一般不建议通过命令行选项设置加密算法,更推荐在应用代码中为各个上下文配置加密算法,因为这种方法提供了更精细的控制,并且降低了全局降低安全级别的风险。
【You can also set the security level and ciphers from the command line using the
--tls-cipher-list=DEFAULT@SECLEVEL=X as described in Modifying the default TLS cipher suite.
However, it is generally discouraged to use the command line option for setting ciphers and it is
preferable to configure the ciphers for individual contexts within your application code,
as this approach provides finer control and reduces the risk of globally downgrading the security level.】