Bug 1812655 - Ironic fails in FIPS mode because of md5 usage
Summary: Ironic fails in FIPS mode because of md5 usage
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat OpenStack
Classification: Red Hat
Component: openstack-ironic
Version: 16.0 (Train)
Hardware: Unspecified
OS: Unspecified
high
high
Target Milestone: z2
: 16.0 (Train on RHEL 8.1)
Assignee: Dmitry Tantsur
QA Contact: Alistair Tonner
URL:
Whiteboard:
Depends On:
Blocks: 1804232
TreeView+ depends on / blocked
 
Reported: 2020-03-11 18:52 UTC by Dmitry Tantsur
Modified: 2020-05-14 12:08 UTC (History)
9 users (show)

Fixed In Version: openstack-ironic-13.0.4-0.20200312185741.771cc7f.el8ost
Doc Type: Bug Fix
Doc Text:
This update fixes several FIPS-140 violations to allow ironic to run in a FIPS environment.
Clone Of: 1804232
Environment:
Last Closed: 2020-05-14 12:07:54 UTC
Target Upstream Version:
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
OpenStack gerrit 712627 0 None MERGED Change force_raw_images to use sha256 if md5 is selected 2020-09-01 05:54:02 UTC
Red Hat Product Errata RHBA-2020:2160 0 None None None 2020-05-14 12:08:13 UTC

Comment 1 Dmitry Tantsur 2020-03-12 09:27:30 UTC 
https://review.opendev.org/#/c/708600/ is already downstream, proposed https://review.opendev.org/#/c/712627/ for stable/train. Hopefully, we can do without downstream backports.
Comment 5 Bob Fournier 2020-04-17 12:38:05 UTC 
Verified by inspection that fix is in OSP-16z2, compose 20200406.1, rpm - openstack-ironic-conductor-13.0.4-0.20200405204619.253253e.el8ost.noarch.
Comment 9 errata-xmlrpc 2020-05-14 12:07:54 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2020:2160
Note You need to log in before you can comment on or make changes to this bug.