Project

General

Profile

Actions

Bug #31992

closed

Global Registration: of FIPS RHEL8 host fails with Transaction error: no digest

Added by Leos Stejskal about 3 years ago. Updated about 3 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Category:
Host registration
Target version:
-
Difficulty:
Triaged:
No
Fixed in Releases:
Found in Releases:

Description

Cloned from https://bugzilla.redhat.com/show_bug.cgi?id=1923320

Description of problem:

Run global registration curl command on FIPS-enabled RHEL8 host. The process fails on katello-ca-consumer installation step with:

Running transaction test
Error: Transaction test error:
package katello-ca-consumer-hostname.redhat.com-1.0-1.noarch does not verify: no digest

This has been described before for RHEL8 FIPS, see https://access.redhat.com/solutions/4460971

The suggested workaround from the kcs is using "rpm -ivh --nodigest --nofiledigest" but I'm not sure if we even want to handle the issue within the template.

Version-Release number of selected component (if applicable):
Satellite 6.9 snap 11

How reproducible:
always

Actual results:
described above

Expected results:
To be establised. Probably some logic in the template to trigger a workaround or at least a user warning and link to the kcs. Alternatively, we could find a way to rebuild katello-ca-consumer to avoid digest-check.

Additional info:
Non-FIPS RHEL8 works as expected

Actions #1

Updated by Leos Stejskal about 3 years ago

  • Category set to Host registration
  • Assignee set to Leos Stejskal
Actions #2

Updated by The Foreman Bot about 3 years ago

  • Status changed from New to Ready For Testing
  • Pull request https://github.com/theforeman/foreman/pull/8363 added
Actions #3

Updated by The Foreman Bot about 3 years ago

  • Fixed in Releases 2.5.0 added
Actions #4

Updated by Leos Stejskal about 3 years ago

  • Status changed from Ready For Testing to Closed
Actions

Also available in: Atom PDF