From f04e2b87aeb6f166283fd1d26b2d6cfcc4b40906 Mon Sep 17 00:00:00 2001 From: Steve Kemp Date: Wed, 13 Jul 2016 12:46:20 +0300 Subject: Retry SSL checks on negotiation failure. This prevents an endless loop. --- lib/custodian/protocoltest/ssl.rb | 2 ++ 1 file changed, 2 insertions(+) (limited to 'lib/custodian') diff --git a/lib/custodian/protocoltest/ssl.rb b/lib/custodian/protocoltest/ssl.rb index 170a6f0..536879e 100644 --- a/lib/custodian/protocoltest/ssl.rb +++ b/lib/custodian/protocoltest/ssl.rb @@ -173,8 +173,10 @@ class SSLCheck end rescue OpenSSL::SSL::SSLError => err unless retried + # # retry with a different context # + retried = true ctx = OpenSSL::SSL::SSLContext.new(:SSLv3_client) retry end -- cgit v1.2.1