[PDB-964] EL5 has trouble with curl using SSLv3 Created: 2014/10/15  Updated: 2016/04/27  Resolved: 2014/10/15

Status: Closed
Project: PuppetDB
Component/s: None
Affects Version/s: PDB 2.2.1
Fix Version/s: PDB 2.2.2

Type: Bug Priority: Normal
Reporter: Ken Barber Assignee: Ken Barber
Resolution: Fixed Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Issue Links:
Story Points: 2
Sprint: PuppetDB 2014-10-22


At the moment when we change the defaults to not allow SSLv3 for the PuppetDB service, the curl requests in our EL5 tests fail. We believe using -tls1 via curl is the right answer here.

Comment by Ken Barber [ 2014/10/15 ]

Seems the right way to do this is with a --tlsv1 switch. -tls1 while it doesn't throw an error, does not do the correct thing here.

Comment by Ken Barber [ 2014/10/15 ]

This is kind of solved now as you can see from the tests here: https://jenkins.puppetlabs.com/view/PuppetDB/job/PuppetDB%20Acceptance%20-%20standalone%20-%20source%20only/

--tlsv1 was indeed the trick.

PR is here: https://github.com/puppetlabs/puppetdb/pull/1125

Generated at Mon Sep 23 13:08:13 PDT 2019 using JIRA 7.7.1#77002-sha1:e75ca93d5574d9409c0630b81c894d9065296414.