Red Hat Bugzilla – Bug 1025446
rhnpush of a MD5 - signed content (RHEL5 & RHEL6) from a FIPS enabled client fails
Last modified: 2015-01-26 06:58:09 EST
Description of problem:
Pushing MD5 - signed content (RHEL-5 package) from a FIPS enabled RHEL
client system to Satellite 5.6 fails with the following error:
# rhnpush -c test-channel-01 --server localhost virt-who-0.7-9.el5.noarch.rpm -vvv -u admin
Connecting to http://localhost/APP
url is http://localhost/PACKAGE-PUSH
Result codes: 200 OK
Computing checksum and package info. This may take some time ...
ERROR: unhandled exception occurred: (error:060800A3:digital envelope routines:EVP_DigestInit_ex:disabled for fips).
Version-Release number of selected component (if applicable):
Steps to Reproduce:
1. Enable FIPS mode on your client system
2. Install rhnpush package on your client system
3. rhnpush a MD5 signed package to a Satellite 5.6
Either rhnpush works or it informs the user the operation is not possible given the circumstances.
Seemingly, rhnpush cannot compute MD5 checksum of the package to be uploaded on a system with FIPS
Fixed in spacewalk.git master: a478498e201f94cff1b4bacd187cf33c8f61c7a8