From 9ec565a9080316cd01093912b7fe0243cf6a5cde Mon Sep 17 00:00:00 2001 From: daniceexi Date: Mon, 2 Mar 2015 05:04:43 -0500 Subject: [PATCH] Continue the change for avoiding sslv3 --- xCAT-client/bin/prsync | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/xCAT-client/bin/prsync b/xCAT-client/bin/prsync index cbbbfc75d..b1bc0be50 100755 --- a/xCAT-client/bin/prsync +++ b/xCAT-client/bin/prsync @@ -63,6 +63,11 @@ if ($fanout) { # see if they overroad the fanout from the command line (my $noderange,my $destloc) = split(/:/,$ARGV[1]); my @user = getpwuid($>); my $homedir=$user[7]; +my %sslargs; +if (defined($ENV{'XCATSSLVER'})) { + $sslargs{SSL_version} = $ENV{'XCATSSLVER'}; +} + my $client = IO::Socket::SSL->new( PeerAddr=>$xcathost, SSL_key_file=>$homedir."/.xcat/client-cred.pem", @@ -70,6 +75,7 @@ my $client = IO::Socket::SSL->new( SSL_ca_file => $homedir."/.xcat/ca.pem", SSL_use_cert => 1, SSL_verify_mode => 1, + %sslargs, ); die "Connection failure: $!\n" unless ($client); my %cmdref = (command => 'noderange', noderange => $noderange);