Bug 1020932 - System registration to a FIPS enabled Satellite failes with ISE
Summary: System registration to a FIPS enabled Satellite failes with ISE
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Red Hat Satellite 5
Classification: Red Hat
Component: Server
Version: 560
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Milan Zázrivec
QA Contact: Jan Hutař
URL:
Whiteboard:
Depends On:
Blocks: 843620
TreeView+ depends on / blocked
 
Reported: 2013-10-18 14:27 UTC by Milan Zázrivec
Modified: 2015-01-26 11:57 UTC (History)
4 users (show)

Fixed In Version: spacewalk-backend-2.2.11-1
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2015-01-26 11:57:38 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)

Description Milan Zázrivec 2013-10-18 14:27:10 UTC
Description of problem:
Registration of a RHEL client to a FIPS enabled Satellite fails
with the following server-side exception:

Exception Handler Information
Traceback (most recent call last):
  File "/usr/lib/python2.6/site-packages/spacewalk/server/apacheRequest.py", line 123, in call_function
    response = apply(func, params)
  File "/usr/share/rhn/server/handlers/xmlrpc/registration.py", line 504, in new_system
    architecture, data)
  File "/usr/share/rhn/server/handlers/xmlrpc/registration.py", line 431, in create_system
    newserv.save(1, channel)
  File "/usr/lib/python2.6/site-packages/spacewalk/server/rhnServer/server_class.py", line 573, in save
    self.__save(channel)
  File "/usr/lib/python2.6/site-packages/spacewalk/server/rhnServer/server_class.py", line 498, in __save
    self.gen_secret()
  File "/usr/lib/python2.6/site-packages/spacewalk/server/rhnServer/server_class.py", line 455, in gen_secret
    self.server["secret"] = gen_secret()
  File "/usr/lib/python2.6/site-packages/spacewalk/server/rhnServer/server_certificate.py", line 35, in gen_secret
    sum = hashlib.new('md5', seed)
  File "/usr/lib64/python2.6/hashlib.py", line 83, in __hash_new
    return _hashlib.new(name, string, usedforsecurity)
ValueError: error:060800A3:digital envelope routines:EVP_DigestInit_ex:disabled for fips


Version-Release number of selected component (if applicable):
Satellite 5.6

How reproducible:
Always

Steps to Reproduce:
1. Install Satellite 5.6 on a FIPS enabled RHEL system
2. Register a client system to your Satellite

Actual results:
Above exception

Expected results:
No errors, registration succeeds.

Additional info:
N/A

Comment 2 Milan Zázrivec 2014-03-27 14:18:30 UTC
spacewalk.git master: 43b1647827497d04f337707f5ec85e0ab238977f


Note You need to log in before you can comment on or make changes to this bug.