2
0
mirror of https://github.com/xcat2/xcat-core.git synced 2025-09-05 17:58:14 +00:00

Fix xCAT client p* commands on SLES

The restricted cipher set does not play well with SLES
defaults.
This commit is contained in:
Jarrod Johnson
2018-07-13 15:50:40 -04:00
parent c63d780f47
commit a3505302c6
6 changed files with 7 additions and 0 deletions

View File

@@ -277,6 +277,7 @@ sub expandnoderange {
SSL_use_cert => 1,
SSL_verify_mode => SSL_VERIFY_PEER,
SSL_verifycn_scheme => "none",
SSL_cipher_list => undef,
%sslargs,
);
die "Connection failure: $!\n" unless ($client);
@@ -335,6 +336,7 @@ sub getipmiattrs {
SSL_use_cert => 1,
SSL_verify_mode => SSL_VERIFY_PEER,
SSL_verifycn_scheme => "none",
SSL_cipher_list => undef,
%sslargs,
);
die "Connection failure: $!\n" unless ($client);

View File

@@ -74,6 +74,7 @@ else { # the normal case of the user running the cmd - expand the noderange usin
SSL_cert_file => xCAT::Utils->getHomeDir() . "/.xcat/client-cred.pem",
SSL_ca_file => xCAT::Utils->getHomeDir() . "/.xcat/ca.pem",
SSL_use_cert => 1,
SSL_cipher_list => undef,
SSL_verify_mode => SSL_VERIFY_PEER,
SSL_verifycn_scheme => "none",
%sslargs,

View File

@@ -90,6 +90,7 @@ my $client = IO::Socket::SSL->new(
SSL_ca_file => $homedir . "/.xcat/ca.pem",
SSL_use_cert => 1,
%sslargs,
SSL_cipher_list => undef,
SSL_verify_mode => SSL_VERIFY_PEER,
SSL_verifycn_scheme => "none",
);

View File

@@ -76,6 +76,7 @@ my $client = IO::Socket::SSL->new(
SSL_cert_file => $homedir . "/.xcat/client-cred.pem",
SSL_ca_file => $homedir . "/.xcat/ca.pem",
SSL_use_cert => 1,
SSL_cipher_list => undef,
SSL_verify_mode => SSL_VERIFY_PEER,
SSL_verifycn_scheme => "none",
%sslargs,

View File

@@ -74,6 +74,7 @@ my $client = IO::Socket::SSL->new(
SSL_use_cert => 1,
SSL_verify_mode => SSL_VERIFY_PEER,
SSL_verifycn_scheme => "none",
SSL_cipher_list => undef,
%sslargs,
);
die "Connection failure: $!\n" unless ($client);

View File

@@ -75,6 +75,7 @@ else {
SSL_use_cert => 1,
SSL_verify_mode => SSL_VERIFY_PEER,
SSL_verifycn_scheme => "none",
SSL_cipher_list => undef,
%sslargs,
);
die "Connection failure: $!\n" unless ($client);