Closed sammcj closed 7 years ago
File /Users/samm/.rvm/gems/ruby-2.4.1/gems/puppet-4.10.0/lib/puppet/util/monkey_patches.rb Line 104:
DEFAULT_PARAMS[:ciphers] << ':!SSLv2'
which is part of:
(#19151) Reject all SSLv2 ciphers and handshakes
require 'openssl'
class OpenSSL::SSL::SSLContext
if DEFAULT_PARAMS[:options]
DEFAULT_PARAMS[:options] |= OpenSSL::SSL::OP_NO_SSLv2 | OpenSSL::SSL::OP_NO_SSLv3
else
DEFAULT_PARAMS[:options] = OpenSSL::SSL::OP_NO_SSLv2 | OpenSSL::SSL::OP_NO_SSLv3
end
DEFAULT_PARAMS[:ciphers] << ':!SSLv2'
alias __original_initialize initialize
private :__original_initialize
def initialize(*args)
__original_initialize(*args)
params = {
:options => DEFAULT_PARAMS[:options],
:ciphers => DEFAULT_PARAMS[:ciphers],
}
set_params(params)
end
end
It appears that puppet relies on an old / specific version of the openssl gem, but isn't specifying to use that exact version when running.
If I comment out line 104 in money_patches.rb
the command works.
~/git/puppet-luks on master puppet module build .
Notice: Building /Users/samm/git/puppet-luks for release
Module built: /Users/samm/git/puppet-luks/pkg/puppet-luks-0.1.2.tar.gz
However the upload to the puppet forge still fails:
although:
https://github.com/sammcj/puppet-luks/blob/master/metadata.json#L4
"author": "sammcj",
Closed,
metadata.json
doesn't use the field Author
it uses the name of the module, which must contain the username rather than puppet-{modulename}
The module should be uploaded to the puppet forge (as antiqued as it is).
Two issues:
https://tickets.puppetlabs.com/browse/PUP-7491
puppet module build .
https://tickets.puppetlabs.com/browse/PUP-7490