Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Bug 1277575

Summary: command extendtesttime.sh doesn't work in FIPS mode
Product: [Retired] Beaker Reporter: Pavel Studeník <pstudeni>
Component: generalAssignee: Dan Callaghan <dcallagh>
Status: CLOSED CURRENTRELEASE QA Contact: Pavel Studeník <pstudeni>
Severity: high Docs Contact:
Priority: high    
Version: 21CC: dcallagh, mjia, omoris, rjoost, szidek
Target Milestone: 22.2Keywords: Patch
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2016-03-15 01:51:28 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Pavel Studeník 2015-11-03 15:01:07 UTC
I can't extend testtime on system that is in FIPS mode.

Package version:
rhts-python-4.67-1.el7.noarch
redhat-release-server-7.1-1.el7.x86_64

# extendtesttime.sh 99
Extending reservation time 99
11/03/15 15:58:33  JobID:1133728 Test:/distribution/reservesys Response:1
root: rhts-test-checkin [::1]:7092 <hostname> 1133728 /distribution/reservesys 99h 35722496
'98d2f1e9-06c8-432b-8e81-c2fda21948fa'
/distribution/reservesys/extend-test-time result: PASS
   metric: 99h
    Info: Searching AVC errors produced since 1446466039.87 (Mon Nov  2 13:07:19 2015)
     Searching logs...
     Fail: AVC messages found.
     Checking for errors...
     Using stronger AVC checks.
        Define empty RHTS_OPTION_STRONGER_AVC parameter if this causes any problems.
     Fail: AVC messages found.
     Info: No AVC messages found.
 Writing to /mnt/testarea/tmp.B6EaYr
:
'aaf16198-ae84-4115-bd0c-518993094ae2'
/distribution/reservesys/extend-test-time/avc result: FAIL
Traceback (most recent call last):
  File "/usr/bin/rhts-db-submit-result", line 726, in <module>
    main()
  File "/usr/bin/rhts-db-submit-result", line 707, in main
    report_log('test_log', recipetestid, result_id, log, logfile, testname)
  File "/usr/bin/rhts-db-submit-result", line 141, in report_log
    rhts.uploadWrapper(session,log_name,recipetestid, prettyname)
  File "/usr/lib/python2.7/site-packages/rhts/__init__.py", line 181, in uploadWrapper
    digestor = digest_constructor()
ValueError: error:060800A3:digital envelope routines:EVP_DigestInit_ex:disabled for fips

Comment 1 Dan Callaghan 2015-11-03 23:27:08 UTC
I was sure that this issue came up years ago and we fixed it already, but I can't find any references in Bugzilla or Gerrit...

The chunk hashing stuff in uploadWrapper just needs to be removed, it serves no purpose at all.

Comment 2 Dan Callaghan 2015-11-03 23:29:42 UTC
Ah ha, it was bug 707623 for beah which was using hashlib for the same purpose (computing unnecessary hashes for uploading file chunks) although in totally separate code.

Comment 3 Dan Callaghan 2016-02-11 06:28:06 UTC
http://gerrit.beaker-project.org/4680

Comment 8 Dan Callaghan 2016-03-08 07:28:58 UTC
Tagged as rhts-4.69-1.

Comment 9 Dan Callaghan 2016-03-15 01:51:28 UTC
Beaker 22.2 has been released.