mirror of
https://github.com/xcat2/xcat-core.git
synced 2025-11-01 11:52:31 +00:00
Explicitly undef the cipher list
SuSE mandates a list. That list does *not* allow TLSv1.2 ciphers, so explicitly put the fate of the connection in the server's hands.
This commit is contained in:
@@ -260,6 +260,7 @@ sub submit_request {
|
||||
SSL_ca_file => $cafile,
|
||||
SSL_verify_mode => SSL_VERIFY_PEER,
|
||||
SSL_verifycn_scheme => "none",
|
||||
SSL_cipher_list => undef,
|
||||
SSL_use_cert => 1,
|
||||
Timeout => 0,
|
||||
%sslargs,
|
||||
@@ -270,6 +271,7 @@ sub submit_request {
|
||||
#need to specify SSL_verify_mode => SSL_VERIFY_NONE explicitly
|
||||
$client = IO::Socket::SSL->start_SSL($pclient,
|
||||
SSL_verify_mode => SSL_VERIFY_NONE,
|
||||
SSL_cipher_list => undef,
|
||||
Timeout => 0,
|
||||
);
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user