Bug 2012826
| Summary: | repo sync fails with [digital envelope routines: EVP_DigestInit_ex] disabled for fips | ||||||
|---|---|---|---|---|---|---|---|
| Product: | Red Hat Satellite | Reporter: | Peter Ondrejka <pondrejk> | ||||
| Component: | Packaging | Assignee: | satellite6-bugs <satellite6-bugs> | ||||
| Status: | CLOSED ERRATA | QA Contact: | Peter Ondrejka <pondrejk> | ||||
| Severity: | high | Docs Contact: | |||||
| Priority: | unspecified | ||||||
| Version: | 6.10.0 | CC: | ggainey, jjeffers, pcreech, ttereshc | ||||
| Target Milestone: | 6.10.0 | ||||||
| Target Release: | Unused | ||||||
| Hardware: | Unspecified | ||||||
| OS: | Unspecified | ||||||
| Whiteboard: | |||||||
| Fixed In Version: | python-pulpcore-3.14.8-2 | Doc Type: | If docs needed, set a value | ||||
| Doc Text: | Story Points: | --- | |||||
| Clone Of: | Environment: | ||||||
| Last Closed: | 2021-11-16 14:13:58 UTC | Type: | Bug | ||||
| Regression: | --- | Mount Type: | --- | ||||
| Documentation: | --- | CRM: | |||||
| Verified Versions: | Category: | --- | |||||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||
| Cloudforms Team: | --- | Target Upstream Version: | |||||
| Embargoed: | |||||||
| Attachments: |
|
||||||
snap22 was built without the required FIPS patch - from internal SatelliteQE chat 08-OCT: Odilon Sousa, Fri 3:23 PM @Brad Buckingham @Grant Gainey yesterday when I updated the downstream build to 3.14.8, we removed the Patch by accident, I'm updating the repo again with the patch, I can do a scratch build to generate a new rpm with 3.14.8 + this patch, while we wait for the next week snap *** Bug 1973346 has been marked as a duplicate of this bug. *** Back to normal on snap 23, repo sync works as expected in FIPS mode Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (Moderate: Satellite 6.10 Release), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHSA-2021:4702 |
Created attachment 1831848 [details] production log Description of problem: Repository synchronization in FIPS mode fails with '[digital envelope routines: EVP_DigestInit_ex] disabled for fips' Version-Release number of selected component (if applicable): Satellite 6.10 sn 22 How reproducible: always Steps to Reproduce: 1. setup Satellte 6.10 in fips mode 2. create a repository (any kind) 3. attempt to sync Actual results: Sync task errors out Expected results: Successful sync Additional info: Applies both for custom and RH yum repos, prodlog excrept attached