diff options
| author | Jonathan Bauer | 2020-02-07 18:07:47 +0100 |
|---|---|---|
| committer | Jonathan Bauer | 2020-02-07 18:07:47 +0100 |
| commit | 054bf7f2386189473e04dea836ecfc674e876c85 (patch) | |
| tree | a60967958e5963d1245bd3d03f5a7b95364e6320 /satellit_upgrader | |
| parent | [SPUS] patch sat version in /etc/motd (diff) | |
| download | setup-scripts-054bf7f2386189473e04dea836ecfc674e876c85.tar.gz setup-scripts-054bf7f2386189473e04dea836ecfc674e876c85.tar.xz setup-scripts-054bf7f2386189473e04dea836ecfc674e876c85.zip | |
[SPUS] debian10: remove CipherString in openssl.cnfv3.9
Diffstat (limited to 'satellit_upgrader')
| -rw-r--r-- | satellit_upgrader/updater.template.sh | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/satellit_upgrader/updater.template.sh b/satellit_upgrader/updater.template.sh index fa5e883..5c734c2 100644 --- a/satellit_upgrader/updater.template.sh +++ b/satellit_upgrader/updater.template.sh @@ -824,6 +824,12 @@ if ! [ -d /var/log/journal ]; then systemctl restart systemd-journald fi +# Debian 10's default SSL configuration changed to only use DEFAULT@SECLEVEL=2 +# as ciphers. We need to patch that, since this can cause problems with ldadp. +if [ "${MAJOR}" -eq 10 ]; then + sed -r -i 's/^[#\s]*(CipherString =.*)/#\1/' /etc/ssl/openssl.cnf +fi + # ************************** LIGHTY ************************ # XXX if [ -n "${restart["lighttpd.service"]}" ]; then |