Skip to content
This repository has been archived by the owner on Jul 19, 2019. It is now read-only.

Regression: Fetch Of Group Admin-Keys Files Fails Under FIPS Mode #29

Open
ferricoxide opened this issue Sep 25, 2018 · 0 comments
Open
Labels
bug Something isn't working

Comments

@ferricoxide
Copy link
Member

Problem Description:

When operating under FIPS mode, the fetch of the Admin-Keys file will fail with a:

ToolError: Failed to retrieve https://s3.amazonaws.com/<BUCKET>/<KEY>/<GROUPKEY_FILE>:
error:060800A3:digital envelope routines:EVP_DigestInit_ex:disabled for fips

Error when launching the Artifactory-EE EC2 templates.

Steps to reproduce:

  1. Launch either Artifactory-EE EC2 template
  2. Wait for launch to fail
  3. Login to instance
  4. View cfn-init.log file
  5. Find previously shown error-snippet

Fix recommendation:

Add launch-logic to update the /usr/lib/python${PYVERS}/site-packages/cfnbootstrap/util.py file's default hash-method. Can use a simple sed type mechanism:

sed -i '/^[ \\t][ \\t]*self._etag/s/etag$/None/'
@ferricoxide ferricoxide added the bug Something isn't working label Sep 25, 2018
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

1 participant