Bug 1743510

Summary: [RFE] enable cipher suite 17 in the ipmitool package
Product: Red Hat Enterprise Linux 7 Reporter: Roman Bobek <rbobek>
Component: ipmitoolAssignee: Vaclav Dolezal <vdolezal>
Status: CLOSED WONTFIX QA Contact: Rachel Sibley <rasibley>
Severity: medium Docs Contact:
Priority: unspecified    
Version: 7.8CC: ovasik, riehecky, rvr
Target Milestone: rcKeywords: FutureFeature
Target Release: ---Flags: rbobek: needinfo-
Hardware: Unspecified   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of:
: 1749360 (view as bug list) Environment:
Last Closed: 2020-01-13 11:49:45 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
Package including the fix. none

Description Roman Bobek 2019-08-20 07:27:05 UTC 
Created attachment 1606004 [details]
Package including the fix.

Description of problem:
Ipmitool commands can't be run on some servers. 

Apparently, this concerns some Intel-based motherboards that needed
their FWs to be upgraded. As confirmed by this release notes
<https://downloadmirror.intel.com/28750/eng/Release%20Notes.txt>;;:

"""
Cipher Suite 3 is disabled by default since BMC firmware 1.90 and
only keep Cipher Suite 17 opened by default./
/Due to this the extra parameter "-C 17" is required for ipmitool to
work via LAN./
"""

Intel TA-1143
<https://www.intel.com/content/dam/support/us/en/documents/server-products/TA-1143.pdf> 

provides a full list of "affected" systems.


Version-Release number of selected component (if applicable):
ipmitool-1.8.18-7

How reproducible:
Always on specific Intel HW.


Additional info:
Our customer has prepared a fixed package with the Cipher Suite 17 support (see enclosed srpm). Can we include the fix in the official RH package?