RHEL Engineering is moving the tracking of its product development work on RHEL 6 through RHEL 9 to Red Hat Jira (issues.redhat.com). If you're a Red Hat customer, please continue to file support cases via the Red Hat customer portal. If you're not, please head to the "RHEL project" in Red Hat Jira and file new tickets here. Individual Bugzilla bugs in the statuses "NEW", "ASSIGNED", and "POST" are being migrated throughout September 2023. Bugs of Red Hat partners with an assigned Engineering Partner Manager (EPM) are migrated in late September as per pre-agreed dates. Bugs against components "kernel", "kernel-rt", and "kpatch" are only migrated if still in "NEW" or "ASSIGNED". If you cannot log in to RH Jira, please consult article #7032570. That failing, please send an e-mail to the RH Jira admins at rh-issues@redhat.com to troubleshoot your issue as a user management inquiry. The email creates a ServiceNow ticket with Red Hat. Individual Bugzilla bugs that are migrated will be moved to status "CLOSED", resolution "MIGRATED", and set with "MigratedToJIRA" in "Keywords". The link to the successor Jira issue will be found under "Links", have a little "two-footprint" icon next to it, and direct you to the "RHEL project" in Red Hat Jira (issue links are of type "https://issues.redhat.com/browse/RHEL-XXXX", where "X" is a digit). This same link will be available in a blue banner at the top of the page informing you that that bug has been migrated.
Bug 2182141 - Add support for hashed license keys to geoipupdate
Summary: Add support for hashed license keys to geoipupdate
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Enterprise Linux 8
Classification: Red Hat
Component: geoipupdate
Version: 8.7
Hardware: x86_64
OS: Linux
medium
medium
Target Milestone: rc
: ---
Assignee: Michal Ruprich
QA Contact: Ondrej Mejzlik
URL:
Whiteboard:
Depends On:
Blocks: 2188376
TreeView+ depends on / blocked
 
Reported: 2023-03-27 16:27 UTC by Robert Scheck
Modified: 2023-11-14 16:17 UTC (History)
5 users (show)

Fixed In Version: geoipupdate-2.5.0-3.el8
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
: 2188376 (view as bug list)
Environment:
Last Closed: 2023-11-14 15:27:07 UTC
Type: Bug
Target Upstream Version:
Embargoed:
pm-rhel: mirror+

Attachments (Terms of Use)
geoipupdate-2.5.0-licensekey.patch (13.12 KB, patch)
2023-04-13 19:33 UTC, Robert Scheck 		no flags Details | Diff
View All


Links
System ID Private Priority Status Summary Last Updated
Red Hat Issue Tracker RHELPLAN-153199 0 None None None 2023-03-27 18:02:23 UTC
Red Hat Product Errata RHBA-2023:6935 0 None None None 2023-11-14 15:27:11 UTC

Description Robert Scheck 2023-03-27 16:27:06 UTC 
Description of problem:
MaxMind let us know that the "legacy version" of geoipupdate in RHEL 8 (and 7) supports only the "less secure unhashed license keys". However beginning March 27, they will no longer be issuing new unhashed license keys (which will break the usage of geoipupdate on RHEL 8 (and 7)).

Thus, please add support for hashed license keys to geoipupdate in RHEL 8 (and 7).

MaxMind refers in their e-mail to version 3.1.1 or greater. During a discussion on the IRC, Carl George had a look to this and discovered https://github.com/maxmind/geoipupdate/commit/824ef039bbc8a2ed5a90d1da5a51d4a1639fdb09, which might do the trick.

As a MaxMind customer, I'm happy to get in touch with them and/or to bring you in touch with them in order to figure out the details.

Version-Release number of selected component (if applicable):
geoipupdate-2.5.0-2.el8

Actual results:
geoipupdate without support for hashed license keys.

Expected results:
Support for hashed license keys in geoipupdate.

Additional info:
This also affects RHEL 7. Cross-filed case 03463949 at the Red Hat customer portal.
Comment 2 Robert Scheck 2023-04-12 07:38:20 UTC 
Michal, ping?
Comment 3 Michal Ruprich 2023-04-13 08:47:05 UTC 
Hi Robert,

sorry for the delay. Can you please test the suggested fix with these packages (adding also the cron packages in case you use them):

https://people.redhat.com/mruprich/geoipupdate-2.5.0-3.el8_8.x86_64.rpm
https://people.redhat.com/mruprich/geoipupdate-cron-2.5.0-3.el8_8.noarch.rpm
https://people.redhat.com/mruprich/geoipupdate-cron6-2.5.0-3.el8_8.noarch.rpm

If that helps, we could release that in next RHEL8.

Let me know if that works.

Regards,
Michal
Comment 4 Robert Scheck 2023-04-13 19:33:01 UTC 
Created attachment 1957377 [details]
geoipupdate-2.5.0-licensekey.patch

I am sorry, the package does not work. I played around and needed these commits to get it working:

1. https://github.com/maxmind/geoipupdate/commit/b7862460b6769f5c40b72de835b868882c3f3883
2. https://github.com/maxmind/geoipupdate/commit/4b41ea887e836ddb1a36c0c3a071ac49e8d71a25
3. https://github.com/maxmind/geoipupdate/commit/01fcfc1170dcedc35c758e111b8905cf6513d8b9
4. https://github.com/maxmind/geoipupdate/commit/6794f2eed0063a50749bf400e135f4f47ca2f465
5. https://github.com/maxmind/geoipupdate/commit/0670ee3e1237a72bae785877b354dbfe135de6be
6. https://github.com/maxmind/geoipupdate/commit/cddabc6f645ea3abbb8117ef0d03069df560fc36
7. https://github.com/maxmind/geoipupdate/commit/35a640087a4eca4e37306b717fa8513e26487b47
8. https://github.com/maxmind/geoipupdate/commit/642978928019f87181dd7c108b0363841c0135a9
9. https://github.com/maxmind/geoipupdate/commit/824ef039bbc8a2ed5a90d1da5a51d4a1639fdb09
Comment 6 Robert Scheck 2023-04-18 16:57:21 UTC 
Michal, any chance for an intermediate feedback?
Comment 7 Michal Ruprich 2023-04-19 14:33:04 UTC 
Hi,

thanks for the patch, this should do it then:

https://people.redhat.com/mruprich/geoipupdate-2.5.0-4.el8_8.x86_64.rpm
https://people.redhat.com/mruprich/geoipupdate-cron-2.5.0-4.el8_8.noarch.rpm
https://people.redhat.com/mruprich/geoipupdate-cron6-2.5.0-4.el8_8.noarch.rpm

Let me know whether this works.

Regards,
Michal
Comment 9 Robert Scheck 2023-04-19 15:15:22 UTC 
From the perspective of a MaxMind GeoIP2 subscription customer the RPM from comment #7 works as expected with old unhashed as well as with the new hashed license keys. Thank you.

Do you see any chance to add this patch to geoipupdate in RHEL 7, too? I am aware that RHEL 7 is in the maintenance support phase, but without this patch, the new hashed license keys don't work using geoipupdate.
Comment 10 Michal Ruprich 2023-04-19 16:10:42 UTC 
Great! As for RHEL7 I don't think that this decision is up to me but I will pass it to those who can decide this. I will keep you posted.
Comment 11 Robert Scheck 2023-04-19 16:33:10 UTC 
I see, but let me just add that I digged into this mainly because of RHEL 7 being affected ;-)
Comment 21 errata-xmlrpc 2023-11-14 15:27:07 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (geoipupdate bug fix and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2023:6935
Note You need to log in before you can comment on or make changes to this bug.