25 lines
1.1 KiB
Python
25 lines
1.1 KiB
Python
s = open('test/config/http/hsm.conf').read()
|
|
old = ''' ssl_protocols TLSv1.2 TLSv1.3;
|
|
ssl_ciphers ECDHE-SM2-SM4-GCM-SM3:ECDHE-SM2-SM4-CBC-SM3:ECC-SM2-SM4-GCM-SM3:ECC-SM2-SM4-CBC-SM3;
|
|
ssl_conf_command Ciphersuites TLS_SM4_GCM_SM3:TLS_SM4_CCM_SM3;
|
|
ssl_verify_client off;
|
|
ssl_prefer_server_ciphers on;
|
|
|
|
ssl_certificate /usr/local/nginx/conf/man/certs/sm2.sig.pem;
|
|
ssl_certificate_key /usr/local/nginx/conf/man/certs/sm2.sig.key;
|
|
'''
|
|
new = ''' ssl_protocols TLSv1.2 TLSv1.3;
|
|
ssl_ntls on;
|
|
ssl_ciphers ECDHE-SM2-SM4-GCM-SM3:ECDHE-SM2-SM4-CBC-SM3:ECC-SM2-SM4-GCM-SM3:ECC-SM2-SM4-CBC-SM3;
|
|
ssl_conf_command Ciphersuites TLS_SM4_GCM_SM3:TLS_SM4_CCM_SM3;
|
|
ssl_verify_client off;
|
|
ssl_prefer_server_ciphers on;
|
|
|
|
ssl_certificate /usr/local/nginx/conf/man/certs/sm2.sig.pem /usr/local/nginx/conf/man/certs/sm2.enc.pem;
|
|
ssl_certificate_key /usr/local/nginx/conf/man/certs/sm2.sig.key /usr/local/nginx/conf/man/certs/sm2.enc.key;
|
|
'''
|
|
assert old in s, 'block not found'
|
|
s = s.replace(old, new)
|
|
open('test/config/http/hsm.conf', 'w').write(s)
|
|
print('CONF_UPDATED')
|