parent
95e93227e2
commit
dd73184c04
@ -1,36 +0,0 @@
|
||||
From 578687a00195191185f44d8cb38f4b7716d99c31 Mon Sep 17 00:00:00 2001
|
||||
From: Josh Cooper <josh@puppet.com>
|
||||
Date: Tue, 16 May 2017 15:47:04 -0700
|
||||
Subject: [PATCH] (PUP-7383) Skip cipher monkey patch on ruby 2.4+
|
||||
|
||||
Previously, we appended "!SSLv2" to the SSLContext
|
||||
DEFAULT_PARAMS[:ciphers] to ensure that puppet never uses SSLv2, either
|
||||
from our http client or when using open-uri. However, ruby 2.4 only
|
||||
defines the `:ciphers` array if using openssl < 1.1.0[1]. As a result,
|
||||
puppet as a gem running on newer systems would hard fail.
|
||||
|
||||
Check existence of array before trying to append to it.
|
||||
|
||||
[1] https://github.com/ruby/ruby/commit/c9dc016#diff-8406e11e4a42f9de6badcd0f6a6c4262R33
|
||||
---
|
||||
lib/puppet/util/monkey_patches.rb | 4 +++-
|
||||
1 file changed, 3 insertions(+), 1 deletion(-)
|
||||
|
||||
diff --git a/lib/puppet/util/monkey_patches.rb b/lib/puppet/util/monkey_patches.rb
|
||||
index b999fc4..ffb887e 100644
|
||||
--- a/lib/puppet/util/monkey_patches.rb
|
||||
+++ b/lib/puppet/util/monkey_patches.rb
|
||||
@@ -35,7 +35,9 @@ class OpenSSL::SSL::SSLContext
|
||||
else
|
||||
DEFAULT_PARAMS[:options] = OpenSSL::SSL::OP_NO_SSLv2 | OpenSSL::SSL::OP_NO_SSLv3
|
||||
end
|
||||
- DEFAULT_PARAMS[:ciphers] << ':!SSLv2'
|
||||
+ if DEFAULT_PARAMS[:ciphers]
|
||||
+ DEFAULT_PARAMS[:ciphers] << ':!SSLv2'
|
||||
+ end
|
||||
|
||||
alias __original_initialize initialize
|
||||
private :__original_initialize
|
||||
--
|
||||
2.7.4
|
||||
|
@ -1,2 +1,2 @@
|
||||
SHA512 (puppet-4.10.1.tar.gz) = d232f062b93485f7eea8abb9c5420462e313e6050e7335159f051f7c7af86338c006ae4edc09e0e1370784ee7b076911ca563a4cfc6a1f2afc7179bed08d2032
|
||||
SHA512 (puppet-4.10.1.tar.gz.asc) = a2a168ca2f48f2db7d8998f0c81895274a2a1c26476a240bd67f0a8c23c54d1ab4fd581d2ac69141cc0de8ed4139107ff2df0ef9b4c31dd76a9592ebd6f453cd
|
||||
SHA512 (puppet-4.10.10.tar.gz) = e517ee349ead56932c9ff54f910d10842c1cd6b6f28673223a65fb72334662d4eabeccc1c7c7603e17aa712c356edbc27fe53d6e7dd7ba042cc0616d0076d755
|
||||
SHA512 (puppet-4.10.10.tar.gz.asc) = 3b17e5505cb1f408e44035a655708cbef7d2bca729ad18180558be2c3b8bddc95e975bc41b53a1451807b38b4088659ed88117173826db588ce3bb96a4329caa
|
||||
|
Loading…
Reference in new issue