有人知道如何在ESXi 6.5上为vmauthd启用SSLv3吗? 由于某种原因,旧的“vmware-vdiskmanager”应用程序坚持使用该命令,而我不能使用VDDK 6.5版本的应用程序,因为它需要SSL证书指纹,但不提供从命令行指定的选项
在ESXi 6.0上工作正常,但升级到6.5后,ESXi拒绝连接(刚收到SSL CLIENT HELLO后)。 在日志中,我可以看到只有tls1.2被允许:
2017-02-27T19:51:51Z vmauthd[68626]: lib/ssl: protocol list tls1.2 2017-02-27T19:51:51Z vmauthd[68626]: lib/ssl: protocol list tls1.2 (openssl flags 0x17000000) 2017-02-27T19:51:51Z vmauthd[68626]: lib/ssl: cipher list !aNULL:kECDH+AESGCM:ECDH+AESGCM:RSA+AESGCM:kECDH+AES:ECDH+AES:RSA+AES
事实上,当vdiskmanager尝试build立SSL时,它确实无法识别该协议:
2017-02-27T20:02:37Z vmauthd[68831]: Msg_SetLocaleEx: HostLocale=UTF-8 UserLocale=NULL 2017-02-27T20:02:37Z vmauthd[68831]: Could not expand environment variable HOME. 2017-02-27T20:02:37Z vmauthd[68831]: Could not expand environment variable HOME. 2017-02-27T20:02:37Z vmauthd[68831]: DictionaryLoad: Cannot open file "/usr/lib/vmware/config": No such file or directory. 2017-02-27T20:02:37Z vmauthd[68831]: DictionaryLoad: Cannot open file "~/.vmware/config": No such file or directory. 2017-02-27T20:02:37Z vmauthd[68831]: DictionaryLoad: Cannot open file "~/.vmware/preferences": No such file or directory. 2017-02-27T20:02:37Z vmauthd[68831]: lib/ssl: OpenSSL using FIPS_drbg for RAND 2017-02-27T20:02:37Z vmauthd[68831]: lib/ssl: protocol list tls1.2 2017-02-27T20:02:37Z vmauthd[68831]: lib/ssl: protocol list tls1.2 (openssl flags 0x17000000) 2017-02-27T20:02:37Z vmauthd[68831]: lib/ssl: cipher list !aNULL:kECDH+AESGCM:ECDH+AESGCM:RSA+AESGCM:kECDH+AES:ECDH+AES:RSA+AES 2017-02-27T20:02:37Z vmauthd[68831]: Connect from remote socket (10.5.0.3:51395). 2017-02-27T20:02:37Z vmauthd[68831]: Connect from 10.5.0.3 2017-02-27T20:02:37Z vmauthd[68831]: SSL Error: error:140760FC:SSL routines:SSL23_GET_CLIENT_HELLO:unknown protocol 2017-02-27T20:02:37Z vmauthd[68831]: recv() FAIL: 1. 2017-02-27T20:02:37Z vmauthd[68831]: VMAuthdSocketRead: read failed. Closing socket for reading. 2017-02-27T20:02:37Z vmauthd[68831]: Read failed.
我尝试了几种方法来改变它,但没有任何成功:
我疯了,还有其他的方法吗?
谢谢