From: Aliasgar Ginwala <aginw...@ebay.com>

Fixes:
ovn-controller --ssl-ciphers='xxx'
Aborted (core dumped)

Avoid invalidating existing certs when bumping to new ovn version
SSL_connect: error:1416F086:SSL 
routines:tls_process_server_certificate:certificate verify failed while 
connecting to control plane.

Signed-off-by: Aliasgar Ginwala <aginw...@ebay.com>
---
 controller/ovn-controller.c | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/controller/ovn-controller.c b/controller/ovn-controller.c
index 856e5e270..4b16818a6 100644
--- a/controller/ovn-controller.c
+++ b/controller/ovn-controller.c
@@ -6166,6 +6166,13 @@ parse_options(int argc, char *argv[])
             ssl_ca_cert_file = optarg;
             break;
 
+        case OPT_SSL_PROTOCOLS:
+            stream_ssl_set_protocols(optarg);
+            break;
+
+        case OPT_SSL_CIPHERS:
+            stream_ssl_set_ciphers(optarg);
+            break;
 
         case OPT_PEER_CA_CERT:
             stream_ssl_set_peer_ca_cert_file(optarg);
-- 
2.39.3 (Apple Git-145)

_______________________________________________
dev mailing list
d...@openvswitch.org
https://mail.openvswitch.org/mailman/listinfo/ovs-dev

Reply via email to