Skip to content
This repository was archived by the owner on Jul 19, 2019. It is now read-only.

Regression: Fetch Of Group Admin-Keys Files Fails Under FIPS Mode #29

Description

@ferricoxide

Problem Description:

When operating under FIPS mode, the fetch of the Admin-Keys file will fail with a:

ToolError: Failed to retrieve https://s3.amazonaws.com/<BUCKET>/<KEY>/<GROUPKEY_FILE>:
error:060800A3:digital envelope routines:EVP_DigestInit_ex:disabled for fips

Error when launching the Artifactory-EE EC2 templates.

Steps to reproduce:

  1. Launch either Artifactory-EE EC2 template
  2. Wait for launch to fail
  3. Login to instance
  4. View cfn-init.log file
  5. Find previously shown error-snippet

Fix recommendation:

Add launch-logic to update the /usr/lib/python${PYVERS}/site-packages/cfnbootstrap/util.py file's default hash-method. Can use a simple sed type mechanism:

sed -i '/^[ \\t][ \\t]*self._etag/s/etag$/None/'

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't working

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions