After upgrading my NetSUS server to 4.1.0 (I did not use the .OVA file) I ran into an issue were the updates for Sierra were not populating in the NetSUS. After a few calls to jamf I tried running the sudo /var/appliance/sus_sync.py from the server and got "Could not replicate 59: Unknown cipher in list: HIGH" After sending that information to Jamf I was give this as a fix. [https://groups.google.com/forum/#!msg/reposado/_fUl1n3uPq8/dobauIM0CAAJ](link URL) Which states to:
Error 59 is a curl error about HTTPS negotiation. It turns out that in Red Hat (and Centos) linuxes, curl is compiled against NSS instead of OpenSSL and the parameters you pass to it are totally different. In short, it doesn't recognise the word "HIGH".
A glance through the NSS documentation reveals that if you specify a specific https encryption method, it will use that exclusively. Specify more than one, and it will only use those. As an experiment, I altered line 300 in the repo_sync utility to look like this:
print >> fileobj, 'ciphers = ' # use only >=128 bit SSL
Once I did this and ran the sudo /var/appliance/sus_sync.py again the sync worked. The issue is now is neither the automatic sync or using the manual sync from the GUI does nothing. I am hoping that someone else has run into this and can help me solve this issue.
