Bug 2182141

Summary: Add support for hashed license keys to geoipupdate
Product: Red Hat Enterprise Linux 8 Reporter: Robert Scheck <redhat-bugzilla>
Component: geoipupdateAssignee: Michal Ruprich <mruprich>
Status: CLOSED ERRATA QA Contact: Ondrej Mejzlik <omejzlik>
Severity: medium Docs Contact:
Priority: medium    
Version: 8.7CC: ccheney, mruprich, omejzlik, robert.scheck, smahanga
Target Milestone: rcKeywords: AutoVerified, Triaged
Target Release: ---Flags: pm-rhel: mirror+
Hardware: x86_64   
OS: Linux   
Whiteboard:
Fixed In Version: geoipupdate-2.5.0-3.el8 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of:
: 2188376 (view as bug list) Environment:
Last Closed: 2023-11-14 15:27:07 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 2188376    
Attachments:
Description Flags
geoipupdate-2.5.0-licensekey.patch none

Description Robert Scheck 2023-03-27 16:27:06 UTC
Description of problem:
MaxMind let us know that the "legacy version" of geoipupdate in RHEL 8 (and 7) supports only the "less secure unhashed license keys". However beginning March 27, they will no longer be issuing new unhashed license keys (which will break the usage of geoipupdate on RHEL 8 (and 7)).

Thus, please add support for hashed license keys to geoipupdate in RHEL 8 (and 7).

MaxMind refers in their e-mail to version 3.1.1 or greater. During a discussion on the IRC, Carl George had a look to this and discovered https://github.com/maxmind/geoipupdate/commit/824ef039bbc8a2ed5a90d1da5a51d4a1639fdb09, which might do the trick.

As a MaxMind customer, I'm happy to get in touch with them and/or to bring you in touch with them in order to figure out the details.

Version-Release number of selected component (if applicable):
geoipupdate-2.5.0-2.el8

Actual results:
geoipupdate without support for hashed license keys.

Expected results:
Support for hashed license keys in geoipupdate.

Additional info:
This also affects RHEL 7. Cross-filed case 03463949 at the Red Hat customer portal.

Comment 2 Robert Scheck 2023-04-12 07:38:20 UTC
Michal, ping?

Comment 3 Michal Ruprich 2023-04-13 08:47:05 UTC
Hi Robert,

sorry for the delay. Can you please test the suggested fix with these packages (adding also the cron packages in case you use them):

https://people.redhat.com/mruprich/geoipupdate-2.5.0-3.el8_8.x86_64.rpm
https://people.redhat.com/mruprich/geoipupdate-cron-2.5.0-3.el8_8.noarch.rpm
https://people.redhat.com/mruprich/geoipupdate-cron6-2.5.0-3.el8_8.noarch.rpm

If that helps, we could release that in next RHEL8.

Let me know if that works.

Regards,
Michal

Comment 6 Robert Scheck 2023-04-18 16:57:21 UTC
Michal, any chance for an intermediate feedback?

Comment 9 Robert Scheck 2023-04-19 15:15:22 UTC
From the perspective of a MaxMind GeoIP2 subscription customer the RPM from comment #7 works as expected with old unhashed as well as with the new hashed license keys. Thank you.

Do you see any chance to add this patch to geoipupdate in RHEL 7, too? I am aware that RHEL 7 is in the maintenance support phase, but without this patch, the new hashed license keys don't work using geoipupdate.

Comment 10 Michal Ruprich 2023-04-19 16:10:42 UTC
Great! As for RHEL7 I don't think that this decision is up to me but I will pass it to those who can decide this. I will keep you posted.

Comment 11 Robert Scheck 2023-04-19 16:33:10 UTC
I see, but let me just add that I digged into this mainly because of RHEL 7 being affected ;-)

Comment 21 errata-xmlrpc 2023-11-14 15:27:07 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (geoipupdate bug fix and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2023:6935