-
Notifications
You must be signed in to change notification settings - Fork 22
reimplement do_https() using HttpPool #56
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: main
Are you sure you want to change the base?
Conversation
This reimplements the `do_https()` method, moving away from `Net::HTTP`, in favor of `Puppet::Network::HttpPool.connection`. This is because Net:HTTP gets emulated by JRuby in puppetserver, and fails to connect via SSL, citing a `handshake_failure`. Instead, this uses Puppet's own HTTP client, which works correctly in both Puppet Agent and Puppetserver. This change makes `node_groups()` work correctly again on newer PE versions that enforce TLS 1.2.
Hit this problem on 2019.7.0, switching over to @kreeuwijk 's fork fixed node_groups() for me. |
Kevin Reeuwijk seems not to be a GitHub user. You need a GitHub account to be able to sign the CLA. If you have already a GitHub account, please add the email address used for this commit to your account. You have signed the CLA already but the status is still pending? Let us recheck it. |
@Ramesh7 @jonathannewman Is this PR still viable or has it been superseded and can it be closed? |
The mechanism used is now deprecated in favor of so it will need to be updated. |
But do we need to update this or has the original problem been solved? |
It is a performance optimization. Ideally it would be updated, but it will function without it. |
@kreeuwijk hi! Any chance you can rebase this? |
This reimplements the
do_https()
method, moving away fromNet::HTTP
, in favor ofPuppet::Network::HttpPool.connection
. This is becauseNet::HTTP
gets emulated by JRuby in Puppetserver, and fails to connect via SSL, citing ahandshake_failure
. Instead, this uses Puppet's own HTTP client, which works correctly in both Puppet Agent and Puppetserver. This change makesnode_groups()
work correctly again on newer PE versions that enforce TLS 1.2.