From 8cf8994dc612604d4aa8875ee0a6b8843950ddd6 Mon Sep 17 00:00:00 2001 From: Fu Diwei Date: Wed, 15 Oct 2025 15:23:12 +0800 Subject: [PATCH] fix: #992 --- .../ssl-deployer/providers/aliyun-waf/aliyun_waf.go | 10 +++++++--- 1 file changed, 7 insertions(+), 3 deletions(-) diff --git a/pkg/core/ssl-deployer/providers/aliyun-waf/aliyun_waf.go b/pkg/core/ssl-deployer/providers/aliyun-waf/aliyun_waf.go index bd39137f0..df9d6bac0 100644 --- a/pkg/core/ssl-deployer/providers/aliyun-waf/aliyun_waf.go +++ b/pkg/core/ssl-deployer/providers/aliyun-waf/aliyun_waf.go @@ -133,11 +133,15 @@ func (d *SSLDeployerProvider) deployToWAF3(ctx context.Context, certPEM string, RegionId: tea.String(d.config.Region), CertId: tea.String(upres.ExtendedData["CertIdentifier"].(string)), TLSVersion: tea.String("tlsv1"), - EnableTLSv3: tea.Bool(false), + EnableTLSv3: tea.Bool(true), } if describeDefaultHttpsResp.Body != nil && describeDefaultHttpsResp.Body.DefaultHttps != nil { - modifyDefaultHttpsReq.TLSVersion = describeDefaultHttpsResp.Body.DefaultHttps.TLSVersion - modifyDefaultHttpsReq.EnableTLSv3 = describeDefaultHttpsResp.Body.DefaultHttps.EnableTLSv3 + if describeDefaultHttpsResp.Body.DefaultHttps.TLSVersion != nil { + modifyDefaultHttpsReq.TLSVersion = describeDefaultHttpsResp.Body.DefaultHttps.TLSVersion + } + if describeDefaultHttpsResp.Body.DefaultHttps.EnableTLSv3 == nil { + modifyDefaultHttpsReq.EnableTLSv3 = describeDefaultHttpsResp.Body.DefaultHttps.EnableTLSv3 + } } modifyDefaultHttpsResp, err := d.sdkClient.ModifyDefaultHttps(modifyDefaultHttpsReq) d.logger.Debug("sdk request 'waf.ModifyDefaultHttps'", slog.Any("request", modifyDefaultHttpsReq), slog.Any("response", modifyDefaultHttpsResp))