fix: AMT WSMAN comm Direct TLS to allow unsafe legacy negotiation
Joko Sastriawan committed
Nov 15, 2022 at 15:05 UTC
427b5263baca7fe6ca71c056783fe8535d939dd5
1 file changed
+1
-1
amt/amt-wsman-comm.js
+1
-1
@@ -274,7 +274,7 @@ var CreateWsmanComm = function (host, port, user, pass, tls, tlsoptions, mpsConn
274
obj.socket.connect(obj.port, obj.host, obj.xxOnSocketConnected);
275
} else {
276
// Direct connect with TLS
277
- var options = { ciphers: 'RSA+AES:!aNULL:!MD5:!DSS', secureOptions: obj.constants.SSL_OP_NO_SSLv2 | obj.constants.SSL_OP_NO_SSLv3 | obj.constants.SSL_OP_NO_COMPRESSION | obj.constants.SSL_OP_CIPHER_SERVER_PREFERENCE, rejectUnauthorized: false };
277
+ var options = { ciphers: 'RSA+AES:!aNULL:!MD5:!DSS', secureOptions: obj.constants.SSL_OP_NO_SSLv2 | obj.constants.SSL_OP_NO_SSLv3 | obj.constants.SSL_OP_NO_COMPRESSION | obj.constants.SSL_OP_CIPHER_SERVER_PREFERENCE | obj.constants.SSL_OP_ALLOW_UNSAFE_LEGACY_RENEGOTIATION, rejectUnauthorized: false };
278
if (obj.xtlsMethod != 0) { options.secureProtocol = 'TLSv1_method'; }
279
if (obj.xtlsoptions) {
280
if (obj.xtlsoptions.ca) { options.ca = obj.xtlsoptions.ca; }