Have xCAT support ssl parameter settings in site table
git-svn-id: https://svn.code.sf.net/p/xcat/code/xcat-core/trunk@15265 8638fb3e-16cb-4fca-ae20-7b5d299a9bcd
This commit is contained in:
parent
b22f425c3e
commit
5a21746fe8
@ -943,6 +943,12 @@ until ($quit) {
|
||||
$SIG{CHLD} = \&generic_reaper; #THROTTLE
|
||||
$listener->close;
|
||||
|
||||
populate_site_hash();
|
||||
my %extrasslargs;
|
||||
if ($::XCATSITEVALS{xcatsslversion}) { $extrasslargs{SSL_version} = $::XCATSITEVALS{xcatsslversion}; }
|
||||
if ($::XCATSITEVALS{xcatsslciphers}) { $extrasslargs{SSL_cipher_list} = $::XCATSITEVALS{xcatsslciphers}; }
|
||||
use Data::Dumper;
|
||||
|
||||
$SIG{ALRM} = sub { $ssltimeout = 1; die; };
|
||||
eval {
|
||||
alarm(10);
|
||||
@ -951,7 +957,8 @@ until ($quit) {
|
||||
SSL_cert_file=>$xcatdir."/cert/server-cred.pem",
|
||||
SSL_ca_file=>$xcatdir."/cert/ca.pem",
|
||||
SSL_server=>1,
|
||||
SSL_verify_mode=> 1
|
||||
SSL_verify_mode=> 1,
|
||||
%extrasslargs,
|
||||
);
|
||||
alarm(0);
|
||||
};
|
||||
@ -973,7 +980,6 @@ until ($quit) {
|
||||
} else {
|
||||
$peername=undef;
|
||||
}
|
||||
populate_site_hash();
|
||||
|
||||
if ($inet6support) {
|
||||
$peerhost = gethostbyaddr($connection->peeraddr,AF_INET6);
|
||||
|
Loading…
Reference in New Issue
Block a user