diff --git a/httpd.spec b/httpd.spec
index 16116223a435606dad6d91fe1fff044038967ab3..93ae1723b77d320cff9f1a5cb1bf860cf3a4628c 100644
--- a/httpd.spec
+++ b/httpd.spec
@@ -8,7 +8,7 @@
 Name:             httpd
 Summary:          Apache HTTP Server
 Version:          2.4.34
-Release:          13
+Release:          14
 License:          ASL 2.0
 URL:              https://httpd.apache.org/
 Source0:          https://www.apache.org/dist/httpd/httpd-%{version}.tar.bz2
@@ -535,6 +535,12 @@ exit $rv
 %{_rpmconfigdir}/macros.d/macros.httpd
 
 %changelog
+* Sun Jan 19 2020 openEuler Buildteam <buildteam@openeuler.org> - 2.4.34-14
+- Type:bugfix
+- ID:NA
+- SUG:NA
+- DESC:add SSLCipherSuite 
+
 * Sat Jan 11 2020 openEuler Buildteam <buildteam@openeuler.org> - 2.4.34-13
 - Type:NA
 - ID:NA
diff --git a/ssl.conf b/ssl.conf
index 373b9e54048a723595ceff041dfb3ea6c4cd0a23..afc92d39fae95666ac02f1b2388ff5e26a0fea63 100644
--- a/ssl.conf
+++ b/ssl.conf
@@ -86,8 +86,8 @@ SSLHonorCipherOrder on
 #   See the mod_ssl documentation for a complete list.
 #   The OpenSSL system profile is configured by default.  See
 #   update-crypto-policies(8) for more details.
-SSLCipherSuite PROFILE=SYSTEM
-SSLProxyCipherSuite PROFILE=SYSTEM
+SSLCipherSuite HIGH:MEDIUM:!aNULL:!MD5:!SHA1:!RC4 
+SSLProxyCipherSuite HIGH:MEDIUM:!aNULL:!MD5:!SHA1:!RC4
 
 #   Point SSLCertificateFile at a PEM encoded certificate.  If
 #   the certificate is encrypted, then you will be prompted for a