summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorJonathan Bauer2020-02-07 18:07:47 +0100
committerJonathan Bauer2020-02-07 18:07:47 +0100
commit054bf7f2386189473e04dea836ecfc674e876c85 (patch)
treea60967958e5963d1245bd3d03f5a7b95364e6320
parent[SPUS] patch sat version in /etc/motd (diff)
downloadsetup-scripts-054bf7f2386189473e04dea836ecfc674e876c85.tar.gz
setup-scripts-054bf7f2386189473e04dea836ecfc674e876c85.tar.xz
setup-scripts-054bf7f2386189473e04dea836ecfc674e876c85.zip
[SPUS] debian10: remove CipherString in openssl.cnfv3.9
-rw-r--r--satellit_upgrader/updater.template.sh6
1 files changed, 6 insertions, 0 deletions
diff --git a/satellit_upgrader/updater.template.sh b/satellit_upgrader/updater.template.sh
index fa5e883..5c734c2 100644
--- a/satellit_upgrader/updater.template.sh
+++ b/satellit_upgrader/updater.template.sh
@@ -824,6 +824,12 @@ if ! [ -d /var/log/journal ]; then
systemctl restart systemd-journald
fi
+# Debian 10's default SSL configuration changed to only use DEFAULT@SECLEVEL=2
+# as ciphers. We need to patch that, since this can cause problems with ldadp.
+if [ "${MAJOR}" -eq 10 ]; then
+ sed -r -i 's/^[#\s]*(CipherString =.*)/#\1/' /etc/ssl/openssl.cnf
+fi
+
# ************************** LIGHTY ************************
# XXX
if [ -n "${restart["lighttpd.service"]}" ]; then