From 8a44f43a34ed14b6a237d952bac2384e9970dc38 Mon Sep 17 00:00:00 2001 From: Mikhail Kuznetsov Date: Fri, 26 Jun 2026 09:25:16 +1000 Subject: [PATCH] =?UTF-8?q?fix(aihitRelationshipsSyncer):=20=D0=9D=D0=B0?= =?UTF-8?q?=D0=B9=D0=B4=D0=B5=D0=BD=D0=BE=20=D1=80=D0=B5=D1=88=D0=B5=D0=BD?= =?UTF-8?q?=D0=B8=D0=B5=20=D0=BF=D1=80=D0=BE=D0=B1=D0=BB=D0=B5=D0=BC=D1=8B?= =?UTF-8?q?=20=D1=81=20=D0=B4=D0=BE=D0=B2=D0=B5=D1=80=D0=B8=D0=B5=D0=BC=20?= =?UTF-8?q?=D1=81=D0=B5=D1=80=D1=82=D0=B8=D1=84=D0=B8=D0=BA=D0=B0=D1=82?= =?UTF-8?q?=D1=83=20=D0=BF=D1=80=D0=B8=20=D0=BF=D0=BE=D0=B4=D0=BA=D0=BB?= =?UTF-8?q?=D1=8E=D1=87=D0=B5=D0=BD=D0=B8=D0=B8=20=D0=BA=20=D0=90=D0=98?= =?UTF-8?q?=D0=A5=20=D0=98=D0=A2?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- PARR.AIHITRelationshipsSyncerWorker/Dockerfile | 16 +++++++--------- 1 file changed, 7 insertions(+), 9 deletions(-) diff --git a/PARR.AIHITRelationshipsSyncerWorker/Dockerfile b/PARR.AIHITRelationshipsSyncerWorker/Dockerfile index 776be4ce..3c7eae02 100644 --- a/PARR.AIHITRelationshipsSyncerWorker/Dockerfile +++ b/PARR.AIHITRelationshipsSyncerWorker/Dockerfile @@ -32,17 +32,15 @@ FROM base AS final WORKDIR /app COPY --from=publish /app/publish . -# Fixes an old version TLS (AIH IT GVC) -# RUN sed -i 's/DEFAULT@SECLEVEL=2/DEFAULT@SECLEVEL=1/g' /etc/ssl/openssl.cnf + +# 1. Принудительно настраиваем OpenSSL 3 на игнорирование непредвиденных EOF (UnsafeLegacyRenegotiation и IgnoreUnexpectedEOF) +RUN sed -i 's/providers = provider_sect/providers = provider_sect\nssl_conf = ssl_sect/' /etc/ssl/openssl.cnf \ + && printf "\n[ssl_sect]\nsystem_default = system_default_sect\n" >> /etc/ssl/openssl.cnf \ + && printf "\n[system_default_sect]\nOptions = UnsafeLegacyRenegotiation,IgnoreUnexpectedEOF\nMinProtocol = TLSv1\nCipherString = DEFAULT@SECLEVEL=0\n" >> /etc/ssl/openssl.cnf -# 1. Настройки для рантайма .NET 9 и SslStream (убираем блокировки) +# 2. Оставляем глобальные переменные совместимости для самого рантайма .NET 9 ENV DOTNET_AppContext_Switch_System_Net_Security_UseUnsafeOldTlsRuntimeBehavior=true -ENV DOTNET_SYSTEM_NET_SECURITY_ALLOWUNSECUREDEFAULTS=true -ENV DOTNET_AppContext_Switch_System_Net_Security_TlsSupport=3072 ENV DOTNET_AppContext_Switch_Microsoft_Data_SqlClient_UseOldTlsValue=true - -# 2. Настройки для системного OpenSSL 3 -ENV OPENSSL_SYSTEM_DEFAULT_MIN_PROTOCOL=TLSv1 -ENV OPENSSL_SYSTEM_DEFAULT_CIPHER_STRING=DEFAULT@SECLEVEL=0 +ENV DOTNET_SYSTEM_NET_SECURITY_ALLOWUNSECUREDEFAULTS=true ENTRYPOINT ["dotnet", "PARR.AIHITRelationshipsSyncerWorker.dll"] \ No newline at end of file