cluster: RHEL57 - fence_cisco_ucs, fence_rhevm: Problems with SSL support

Marek Grác marx at fedoraproject.org
Mon Apr 4 16:27:30 UTC 2011


Gitweb:        http://git.fedorahosted.org/git/cluster.git?p=cluster.git;a=commitdiff;h=3f19f28cc76c564f845fddd54a231f35410015fa
Commit:        3f19f28cc76c564f845fddd54a231f35410015fa
Parent:        56ac82f2ed4babb8940305411591234698ca212c
Author:        Marek 'marx' Grac <mgrac at redhat.com>
AuthorDate:    Mon Apr 4 14:59:47 2011 +0200
Committer:     Marek 'marx' Grac <mgrac at redhat.com>
CommitterDate: Mon Apr 4 18:13:56 2011 +0200

fence_cisco_ucs, fence_rhevm: Problems with SSL support

Both of these agents are using pycurl. This library has different default
setting across various distributions, so it is better to set SSL options
directly.

Resolves: rhbz#691392
---
 fence/agents/cisco_ucs/fence_cisco_ucs.py |    1 +
 fence/agents/rhevm/fence_rhevm.py         |    1 +
 2 files changed, 2 insertions(+), 0 deletions(-)

diff --git a/fence/agents/cisco_ucs/fence_cisco_ucs.py b/fence/agents/cisco_ucs/fence_cisco_ucs.py
index 8505c31..beecd3a 100755
--- a/fence/agents/cisco_ucs/fence_cisco_ucs.py
+++ b/fence/agents/cisco_ucs/fence_cisco_ucs.py
@@ -88,6 +88,7 @@ def send_command(opt, command):
 	c.setopt(pycurl.WRITEFUNCTION, b.write)
 	c.setopt(pycurl.TIMEOUT, int(opt["-Y"]))
 	c.setopt(pycurl.SSL_VERIFYPEER, 0)
+	c.setopt(pycurl.SSL_VERIFYHOST, 0)
 	c.perform()
 	result = b.getvalue()
 
diff --git a/fence/agents/rhevm/fence_rhevm.py b/fence/agents/rhevm/fence_rhevm.py
index 323ccf8..1cb8d00 100755
--- a/fence/agents/rhevm/fence_rhevm.py
+++ b/fence/agents/rhevm/fence_rhevm.py
@@ -99,6 +99,7 @@ def send_command(opt, command, method = "GET"):
 	c.setopt(pycurl.USERPWD, opt["-l"] + ":" + opt["-p"])
 	c.setopt(pycurl.TIMEOUT, int(opt["-Y"]))
 	c.setopt(pycurl.SSL_VERIFYPEER, 0)
+	c.setopt(pycurl.SSL_VERIFYHOST, 0)
 
 	if (method == "POST"):
 		c.setopt(pycurl.POSTFIELDS, "<action />")


More information about the cluster-commits mailing list