Changeset 8292

Timestamp:

27/10/14 17:24:30 (3 years ago)

Author:

spascoe

Message:

Remove forced SSLv3.

After the POODLE vulnerability sslv3 is disabled on all ESGF servers, therefore this switch
which forces sslv3 needs to be removed.

Location:

trunk/MyProxyWebService/myproxy/ws/client

Files:

• myproxy-ws-get-trustroots.sh (modified) (1 diff)
• myproxy-ws-logon.sh (modified) (1 diff)

trunk/MyProxyWebService/myproxy/ws/client/myproxy-ws-get-trustroots.sh

@@ -77 +77 @@
 
 # Post request to MyProxy web service
-response=$(curl $uri --sslv3 $ca_arg -w " %{http_code}" -s -S)
+response=$(curl $uri $ca_arg -w " %{http_code}" -s -S)
 responsemsg=$(echo "$response"|sed '$s/ *\([^ ]* *\)$//')
 responsecode=$(echo $response|awk '{print $NF}')

trunk/MyProxyWebService/myproxy/ws/client/myproxy-ws-logon.sh

@@ -104 +104 @@
 encoded_certreq=$(cat $certreqfilepath|sed s/+/%2B/g)
 
-response=$(curl $uri --sslv3 -u $username:$password --data "certificate_request=$encoded_certreq" --capath $cadir -w " %{http_code}" -s -S)
+response=$(curl $uri -u $username:$password --data "certificate_request=$encoded_certreq" --capath $cadir -w " %{http_code}" -s -S)
 
 responsemsg=$(echo "$response"|sed '$s/ *\([^ ]* *\)$//')