Fix problem with verifying signature on AIX (#57)

Dynatrace · Dec 18, 2024 · acc055a · acc055a
1 parent fd6109d
commit acc055a
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 1 deletion.
diff --git a/roles/oneagent/tasks/provide-installer/signature-unix.yml b/roles/oneagent/tasks/provide-installer/signature-unix.yml
@@ -27,7 +27,7 @@
   ansible.builtin.shell: >
     ( printf '%s\n' '{{ oneagent_certificate_verification_header }}';
     printf '\n\n----SIGNED-INSTALLER\n'; cat "{{ oneagent_installer_path }}" ) |
-    openssl cms -verify -CAfile "{{ oneagent_ca_cert_dest_path }}" > /dev/null
+    {{ oneagent_additional_openssl_env | default('') }} openssl cms -verify -CAfile "{{ oneagent_ca_cert_dest_path }}" > /dev/null
   no_log: true
   ignore_errors: true
   changed_when: false

diff --git a/roles/oneagent/vars/aix.yml b/roles/oneagent/vars/aix.yml
@@ -21,4 +21,5 @@ oneagent_ca_cert_src_path: "{{ role_path }}/files/dt-root.cert.pem"
 oneagent_ca_cert_dest_path: "{{ oneagent_download_path }}/dt-root.cert.pem"
 oneagent_certificate_verification_header: >
   Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg="sha-256"; boundary="--SIGNED-INSTALLER"
+oneagent_additional_openssl_env: LDR_CNTRL=MAXDATA=0x40000000
 oneagent_service_name: oneagent