Bug 1277575 - command extendtesttime.sh doesn't work in FIPS mode
Summary: command extendtesttime.sh doesn't work in FIPS mode
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Beaker
Classification: Retired
Component: general
Version: 21
Hardware: All
OS: Linux
high
high
Target Milestone: 22.2
Assignee: Dan Callaghan
QA Contact: Pavel Studeník
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2015-11-03 15:01 UTC by Pavel Studeník
Modified: 2016-03-15 01:51 UTC (History)
5 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2016-03-15 01:51:28 UTC
Embargoed:


Attachments (Terms of Use)

Description Pavel Studeník 2015-11-03 15:01:07 UTC
I can't extend testtime on system that is in FIPS mode.

Package version:
rhts-python-4.67-1.el7.noarch
redhat-release-server-7.1-1.el7.x86_64

# extendtesttime.sh 99
Extending reservation time 99
11/03/15 15:58:33  JobID:1133728 Test:/distribution/reservesys Response:1
root: rhts-test-checkin [::1]:7092 <hostname> 1133728 /distribution/reservesys 99h 35722496
'98d2f1e9-06c8-432b-8e81-c2fda21948fa'
/distribution/reservesys/extend-test-time result: PASS
   metric: 99h
    Info: Searching AVC errors produced since 1446466039.87 (Mon Nov  2 13:07:19 2015)
     Searching logs...
     Fail: AVC messages found.
     Checking for errors...
     Using stronger AVC checks.
        Define empty RHTS_OPTION_STRONGER_AVC parameter if this causes any problems.
     Fail: AVC messages found.
     Info: No AVC messages found.
 Writing to /mnt/testarea/tmp.B6EaYr
:
'aaf16198-ae84-4115-bd0c-518993094ae2'
/distribution/reservesys/extend-test-time/avc result: FAIL
Traceback (most recent call last):
  File "/usr/bin/rhts-db-submit-result", line 726, in <module>
    main()
  File "/usr/bin/rhts-db-submit-result", line 707, in main
    report_log('test_log', recipetestid, result_id, log, logfile, testname)
  File "/usr/bin/rhts-db-submit-result", line 141, in report_log
    rhts.uploadWrapper(session,log_name,recipetestid, prettyname)
  File "/usr/lib/python2.7/site-packages/rhts/__init__.py", line 181, in uploadWrapper
    digestor = digest_constructor()
ValueError: error:060800A3:digital envelope routines:EVP_DigestInit_ex:disabled for fips

Comment 1 Dan Callaghan 2015-11-03 23:27:08 UTC
I was sure that this issue came up years ago and we fixed it already, but I can't find any references in Bugzilla or Gerrit...

The chunk hashing stuff in uploadWrapper just needs to be removed, it serves no purpose at all.

Comment 2 Dan Callaghan 2015-11-03 23:29:42 UTC
Ah ha, it was bug 707623 for beah which was using hashlib for the same purpose (computing unnecessary hashes for uploading file chunks) although in totally separate code.

Comment 3 Dan Callaghan 2016-02-11 06:28:06 UTC
http://gerrit.beaker-project.org/4680

Comment 8 Dan Callaghan 2016-03-08 07:28:58 UTC
Tagged as rhts-4.69-1.

Comment 9 Dan Callaghan 2016-03-15 01:51:28 UTC
Beaker 22.2 has been released.


Note You need to log in before you can comment on or make changes to this bug.