Problem Description:
When operating under FIPS mode, the fetch of the Admin-Keys file will fail with a:
ToolError: Failed to retrieve https://s3.amazonaws.com/<BUCKET>/<KEY>/<GROUPKEY_FILE>:
error:060800A3:digital envelope routines:EVP_DigestInit_ex:disabled for fips
Error when launching the Artifactory-EE EC2 templates.
Steps to reproduce:
- Launch either Artifactory-EE EC2 template
- Wait for launch to fail
- Login to instance
- View
cfn-init.log file
- Find previously shown error-snippet
Fix recommendation:
Add launch-logic to update the /usr/lib/python${PYVERS}/site-packages/cfnbootstrap/util.py file's default hash-method. Can use a simple sed type mechanism:
sed -i '/^[ \\t][ \\t]*self._etag/s/etag$/None/'
Problem Description:
When operating under FIPS mode, the fetch of the Admin-Keys file will fail with a:
Error when launching the Artifactory-EE EC2 templates.
Steps to reproduce:
cfn-init.logfileFix recommendation:
Add launch-logic to update the
/usr/lib/python${PYVERS}/site-packages/cfnbootstrap/util.pyfile's default hash-method. Can use a simplesedtype mechanism: