mikhail/parr_api
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(aihitRelationshipsSyncer): Найдено решение проблемы с доверием сертификату при подключении к АИХ ИТ

Browse Source
This commit is contained in:
Mikhail Kuznetsov
2026-06-26 09:25:16 +10:00
parent 16ba4f21a2
commit 8a44f43a34
1 changed files with 7 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
PARR.AIHITRelationshipsSyncerWorker/Dockerfile
View File

@@ -32,17 +32,15 @@ FROM base AS final
WORKDIR /app
COPY --from=publish /app/publish .
# Fixes an old version TLS (AIH IT GVC)
# RUN sed -i 's/DEFAULT@SECLEVEL=2/DEFAULT@SECLEVEL=1/g' /etc/ssl/openssl.cnf
# 1. Ïðèíóäèòåëüíî íàñòðàèâàåì OpenSSL 3 íà èãíîðèðîâàíèå íåïðåäâèäåííûõ EOF (UnsafeLegacyRenegotiation è IgnoreUnexpectedEOF)
RUN sed -i 's/providers = provider_sect/providers = provider_sect\nssl_conf = ssl_sect/' /etc/ssl/openssl.cnf \
&& printf "\n[ssl_sect]\nsystem_default = system_default_sect\n" >> /etc/ssl/openssl.cnf \
&& printf "\n[system_default_sect]\nOptions = UnsafeLegacyRenegotiation,IgnoreUnexpectedEOF\nMinProtocol = TLSv1\nCipherString = DEFAULT@SECLEVEL=0\n" >> /etc/ssl/openssl.cnf
# 1. Íàñòðîéêè äëÿ ðàíòàéìà .NET 9 è SslStream (óáèðàåì áëîêèðîâêè)
# 2. Îñòàâëÿåì ãëîáàëüíûå ïåðåìåííûå ñîâìåñòèìîñòè äëÿ ñàìîãî ðàíòàéìà .NET 9
ENV DOTNET_AppContext_Switch_System_Net_Security_UseUnsafeOldTlsRuntimeBehavior=true
ENV DOTNET_SYSTEM_NET_SECURITY_ALLOWUNSECUREDEFAULTS=true
ENV DOTNET_AppContext_Switch_System_Net_Security_TlsSupport=3072
ENV DOTNET_AppContext_Switch_Microsoft_Data_SqlClient_UseOldTlsValue=true
# 2. Íàñòðîéêè äëÿ ñèñòåìíîãî OpenSSL 3
ENV OPENSSL_SYSTEM_DEFAULT_MIN_PROTOCOL=TLSv1
ENV OPENSSL_SYSTEM_DEFAULT_CIPHER_STRING=DEFAULT@SECLEVEL=0
ENV DOTNET_SYSTEM_NET_SECURITY_ALLOWUNSECUREDEFAULTS=true
ENTRYPOINT ["dotnet", "PARR.AIHITRelationshipsSyncerWorker.dll"]