From 69d09fdd6cb66fdfc92f2f2388c4899dfd93d0ad Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?RickyChen=20/=20=E9=99=B3=E6=98=AD=E5=84=92?= Date: Fri, 23 Jan 2026 01:53:24 +0800 Subject: [PATCH] [Feature] Add --ssl-ciphers CLI argument for TLS cipher control (#30937) Signed-off-by: rickychen-infinirc --- vllm/entrypoints/openai/api_server.py | 1 + vllm/entrypoints/openai/cli_args.py | 3 +++ 2 files changed, 4 insertions(+) diff --git a/vllm/entrypoints/openai/api_server.py b/vllm/entrypoints/openai/api_server.py index 2d7a637df49..c7941bf256c 100644 --- a/vllm/entrypoints/openai/api_server.py +++ b/vllm/entrypoints/openai/api_server.py @@ -961,6 +961,7 @@ async def run_server_worker( ssl_certfile=args.ssl_certfile, ssl_ca_certs=args.ssl_ca_certs, ssl_cert_reqs=args.ssl_cert_reqs, + ssl_ciphers=args.ssl_ciphers, h11_max_incomplete_event_size=args.h11_max_incomplete_event_size, h11_max_header_count=args.h11_max_header_count, **uvicorn_kwargs, diff --git a/vllm/entrypoints/openai/cli_args.py b/vllm/entrypoints/openai/cli_args.py index fe874f88dcd..0644e91a7f9 100644 --- a/vllm/entrypoints/openai/cli_args.py +++ b/vllm/entrypoints/openai/cli_args.py @@ -132,6 +132,9 @@ class FrontendArgs: """Refresh SSL Context when SSL certificate files change""" ssl_cert_reqs: int = int(ssl.CERT_NONE) """Whether client certificate is required (see stdlib ssl module's).""" + ssl_ciphers: str | None = None + """SSL cipher suites for HTTPS (TLS 1.2 and below only). + Example: 'ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-CHACHA20-POLY1305'""" root_path: str | None = None """FastAPI root_path when app is behind a path based routing proxy.""" middleware: list[str] = field(default_factory=lambda: [])