fix(webconsole): disable 3des cipher suites (#22296)

Author: zexi

pkg/appsrv/appsrv.go

@@ -484,6 +484,10 @@ func timeoutHandle(h http.Handler) http.HandlerFunc {
 }
 
 func (app *Application) initServer(addr string) *http.Server {
+	return InitHTTPServer(app, addr)
+}
+
+func InitHTTPServer(app *Application, addr string) *http.Server {
 	/* db := AppContextDB(app.context)
 	if db != nil {
 		db.SetMaxIdleConns(app.connMax + 1)

pkg/webconsole/service/service.go

@@ -110,10 +110,9 @@ func start() {
 	addr := net.JoinHostPort(o.Options.Address, strconv.Itoa(o.Options.Port))
 	log.Infof("Start listen on %s", addr)
 	if o.Options.EnableSsl {
-		err := http.ListenAndServeTLS(addr,
-			o.Options.SslCertfile,
-			o.Options.SslKeyfile,
-			root)
+		srv := appsrv.InitHTTPServer(app, addr)
+		srv.Handler = root
+		err := srv.ListenAndServeTLS(o.Options.SslCertfile, o.Options.SslKeyfile)
 		if err != nil && err != http.ErrServerClosed {
 			log.Fatalf("%v", err)
 		}