Those two rpms should be all you need. Install them and it should start working. I think that xCAT is new enough where you wouldn't have to restart xcatd, but if it still doesn't work, restart xcatd.
There is no simpler solution. -----Original Message----- From: Rogie Pamintuan <rbpamint...@gmail.com> Sent: Thursday, June 14, 2018 8:47 AM To: xCAT Users Mailing list <xcat-user@lists.sourceforge.net> Subject: Re: [xcat-user] [External] No cipher suite match with proposed security algorithms Morning Jarrod, Just to confirm > Installing the two rpms you’ve referenced will resolve the issue on xcat2.8.2? I dont expect any side effect, right? Let me know if there is a simplier solution. Thanks! > On Jun 13, 2018, at 10:01 AM, Rogie Pamintuan <rbpamint...@gmail.com> wrote: > > Morning Jarrod. Thanks for looking at this issue. > > I look at my environment, I don’t have the two rpms installed. > > ]# lsxcatd -v > Version 2.8.2 (built Fri Oct 25 04:29:40 EDT 2013) # rpm -qa | grep -i > perl-Crypt > perl-Crypt-SSLeay-0.57-16.el6.x86_64 > > Thank you. > > >> On Jun 13, 2018, at 8:50 AM, Jarrod Johnson <jjohns...@lenovo.com> wrote: >> >> Can you check if you have the two rpms installed I referenced? If >> they are installed (CBC and Rijndael) then 2.8.2 should be able to >> communicate using the stricter security cipher. >> -----Original Message----- >> From: Rogie Pamintuan <rbpamint...@gmail.com> >> Reply-To: xCAT Users Mailing list <xcat-user@lists.sourceforge.net> >> To: xCAT Users Mailing list <xcat-user@lists.sourceforge.net> >> Subject: Re: [xcat-user] [External] No cipher suite match with >> proposed security algorithms >> Date: Tue, 12 Jun 2018 17:43:23 -0400 >> >> Hi Jarrod, >> I have xCAT v2.8.2 (comes with PHPC) which works on my existing >> idataflex nodes. When u say we disabled weaker ciphers in the XCC >> (BMC/IMM), how easy it is to enable? Any workaround? Thanks. >> >> On Jun 12, 2018, at 4:23 PM, Jarrod Johnson <jjohns...@lenovo.com> >> wrote: >> >>> What version of xCAT? Do you have perl-Crypt-Rijndael and perl- >>> Crypt-CBC installed? >>> We disabled the weaker ciphers in the XCC (BMC/IMM), which means you >>> now *must* have AES support to speak to the BMC, whereas at one >>> point it was optional. >>> >>> From: Rogie Pamintuan <rbpamint...@gmail.com> >>> Sent: Tuesday, June 12, 2018 4:09 PM >>> To: xcat-user@lists.sourceforge.net >>> Subject: [External] [xcat-user] No cipher suite match with proposed >>> security algorithms >>> >>> Hi There, >>> >>> I’m having issue adding new nodes running on Lenovo 7x02 SR630 HW. >>> No problem with existing nodes running on idataflex HW. >>> >>> Here goes the error: >>> >>> # rinv compute000 >>> compute000: Error: No cipher suite match with proposed security >>> algorithms >>> compute000: Error: No cipher suite match with proposed security >>> algorithms >>> compute000: Error: No cipher suite match with proposed security >>> algorithms >>> compute000: Error: No cipher suite match with proposed security >>> algorithms >>> compute000: Error: No cipher suite match with proposed security >>> algorithms >>> >>> Other r* commands (i.e rpower, rvitals etc) showing the same issue. >>> >>> I have updated the HW firmware level for my Lenovo machines but >>> still having the same issue. >>> >>> I saw similar issue here before but I can’t see the answer or update. >>> Link as follow: >>> >>> https://sourceforge.net/p/xcat/mailman/message/32241804/ >>> >>> Any help will be greatly appreciated. Thank you! >>> ------------------------------------------------------------------- >>> ----------- >>> Check out the vibrant tech community on one of the world's most >>> engaging tech sites, Slashdot.org! http://sdm.link/slashdot >>> _______________________________________________ >>> xCAT-user mailing list >>> xCAT-user@lists.sourceforge.net >>> https://lists.sourceforge.net/lists/listinfo/xcat-user >> >> --------------------------------------------------------------------- >> --------- >> Check out the vibrant tech community on one of the world's most >> engaging tech sites, Slashdot.org! http://sdm.link/slashdot >> _______________________________________________ >> xCAT-user mailing list >> xCAT-user@lists.sourceforge.net >> https://lists.sourceforge.net/lists/listinfo/xcat-user >> --------------------------------------------------------------------- >> --------- Check out the vibrant tech community on one of the world's >> most engaging tech sites, Slashdot.org! http://sdm.link/slashdot >> _______________________________________________ >> xCAT-user mailing list >> xCAT-user@lists.sourceforge.net >> https://lists.sourceforge.net/lists/listinfo/xcat-user > ------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot _______________________________________________ xCAT-user mailing list xCAT-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/xcat-user ------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot _______________________________________________ xCAT-user mailing list xCAT-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/xcat-user
