Project

General

Profile

Bug #31992

Global Registration: of FIPS RHEL8 host fails with Transaction error: no digest

Added by Leos Stejskal 7 months ago. Updated 6 months ago.

Status:
Closed
Priority:
Normal
Assignee:
Category:
Host registration
Target version:
-
Difficulty:
Triaged:
No
Bugzilla link:
Fixed in Releases:
Found in Releases:

Description

Cloned from https://bugzilla.redhat.com/show_bug.cgi?id=1923320

Description of problem:

Run global registration curl command on FIPS-enabled RHEL8 host. The process fails on katello-ca-consumer installation step with:

Running transaction test
Error: Transaction test error:
package katello-ca-consumer-hostname.redhat.com-1.0-1.noarch does not verify: no digest

This has been described before for RHEL8 FIPS, see https://access.redhat.com/solutions/4460971

The suggested workaround from the kcs is using "rpm -ivh --nodigest --nofiledigest" but I'm not sure if we even want to handle the issue within the template.

Version-Release number of selected component (if applicable):
Satellite 6.9 snap 11

How reproducible:
always

Actual results:
described above

Expected results:
To be establised. Probably some logic in the template to trigger a workaround or at least a user warning and link to the kcs. Alternatively, we could find a way to rebuild katello-ca-consumer to avoid digest-check.

Additional info:
Non-FIPS RHEL8 works as expected

Associated revisions

Revision c70f81b9 (diff)
Added by Leos Stejskal 6 months ago

Fixes #31992 - Registration of host with FIPS

Workaround for systems with enabled FIPS,
where installation of RPM generated on RHEL7 cause 'no digest' error.
For more details see:
- https://projects.theforeman.org/issues/32068
- https://access.redhat.com/solutions/4460971

History

#1 Updated by Leos Stejskal 7 months ago

  • Assignee set to Leos Stejskal
  • Category set to Host registration

#2 Updated by The Foreman Bot 7 months ago

  • Status changed from New to Ready For Testing
  • Pull request https://github.com/theforeman/foreman/pull/8363 added

#3 Updated by The Foreman Bot 6 months ago

  • Fixed in Releases 2.5.0 added

#4 Updated by Leos Stejskal 6 months ago

  • Status changed from Ready For Testing to Closed

Also available in: Atom PDF