Bug 2336087

Summary: Failed to create SSL context: error:1C8000D6:Provider routines::module integrity failure
Product: [Fedora] Fedora Reporter: Xiaofeng Wang <xiaofwan>
Component: opensslAssignee: Dmitry Belyavskiy <dbelyavs>
Status: CLOSED DUPLICATE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: high Docs Contact:
Priority: unspecified    
Version: 41CC: crypto-team, dbelyavs, mcermak, mjw, mspacek, mturk, shebburn, suraj.ghimire7, tm
Target Milestone: ---Keywords: TestBlocker, Triaged
Target Release: ---Flags: fedora-admin-xmlrpc: mirror+
Hardware: Unspecified   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2025-01-07 10:35:52 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Xiaofeng Wang 2025-01-07 08:14:20 UTC 
Enable FIPS and start systemd-resolved service with the following error:

Jan 06 06:58:40 fedora audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'

This issue only exists on openssl-3.2.2-10.fc41.x86_64, openssl-libs-3.2.2-10.fc41.x86_64.

openssl-3.2.2-9.fc41.x86_64, openssl-libs-3.2.2-9.fc41.x86_64 works well.

Reproducible: Always

Actual Results:  
Can't start systemd-resolved service

Expected Results:  
Start systemd-resolved without error
Comment 1 Xiaofeng Wang 2025-01-07 08:15:11 UTC 
Log should be like  Jan 06 06:58:40 fedora systemd-resolved[1127]: Failed to create SSL context: error:1C8000D6:Provider routines::module integrity failure
Comment 2 Dmitry Belyavskiy 2025-01-07 08:25:06 UTC 
Looks like https://bugzilla.redhat.com/show_bug.cgi?id=2335414 is related
Comment 3 Xiaofeng Wang 2025-01-07 08:33:50 UTC 
Fedora rawhide has the same issue with openssl-3.2.2-10.fc42.aarch64.
Comment 4 Dmitry Belyavskiy 2025-01-07 10:35:52 UTC 

*** This bug has been marked as a duplicate of bug 2335414 ***
Comment 5 Dmitry Belyavskiy 2025-01-08 15:53:19 UTC 
Should be fixed for f41/rawhide by openssl-3.2.2-11