Bug 2062815

Summary:	python-cryptography does not detect 3DES is blocked in FIPS mode [rhel-9.1.0]
Product:	Red Hat Enterprise Linux 9	Reporter:	RHEL Program Management Team <pgm-rhel-tools>
Component:	python-cryptography	Assignee:	Christian Heimes <cheimes>
Status:	CLOSED ERRATA	QA Contact:	Kaleem <ksiddiqu>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	9.0	CC:	frenaud, lmiksik, myusuf, ssidhaye, sumenon
Target Milestone:	rc	Keywords:	Triaged
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:	python-cryptography-36.0.1-1.el9	Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:	2055209	Environment:
Last Closed:	2022-11-15 10:10:47 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	2055209, 2060787
Bug Blocks:

Comment 7 Sumedh Sidhaye 2022-04-24 12:41:28 UTC

[root@ci-vm-10-0-136-100 ~]# sysctl crypto.fips_enabled
crypto.fips_enabled = 1
[root@ci-vm-10-0-136-100 ~]# cat /etc/redhat-release 
Red Hat Enterprise Linux release 9.1 Beta (Plow)
[root@ci-vm-10-0-136-100 ~]# rpm -q python3-cryptography
python3-cryptography-36.0.1-2.el9.x86_64
[root@ci-vm-10-0-136-100 ~]# python3

Python 3.9.10 (main, Feb  9 2022, 00:00:00) 
[GCC 11.2.1 20220127 (Red Hat 11.2.1-9)] on linux
Type "help", "copyright", "credits" or "license" for more information.
>>> from cryptography.hazmat.backends.openssl import backend
>>> backend._is_fips_enabled()
True
>>> from cryptography.hazmat.primitives.ciphers import algorithms, modes
>>> backend.cipher_supported(algorithms.TripleDES(b"\x00" * 8), modes.CBC(b"\x00" * 8))
False
>>> 

Based on above observations marking Bugzilla verified

Comment 9 errata-xmlrpc 2022-11-15 10:10:47 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (python-cryptography bug fix and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2022:8015