Bug #31992
closedGlobal Registration: of FIPS RHEL8 host fails with Transaction error: no digest
Description
Cloned from https://bugzilla.redhat.com/show_bug.cgi?id=1923320
Description of problem:
Run global registration curl command on FIPS-enabled RHEL8 host. The process fails on katello-ca-consumer installation step with:
Running transaction test
Error: Transaction test error:
package katello-ca-consumer-hostname.redhat.com-1.0-1.noarch does not verify: no digest
This has been described before for RHEL8 FIPS, see https://access.redhat.com/solutions/4460971
The suggested workaround from the kcs is using "rpm -ivh --nodigest --nofiledigest" but I'm not sure if we even want to handle the issue within the template.
Version-Release number of selected component (if applicable):
Satellite 6.9 snap 11
How reproducible:
always
Actual results:
described above
Expected results:
To be establised. Probably some logic in the template to trigger a workaround or at least a user warning and link to the kcs. Alternatively, we could find a way to rebuild katello-ca-consumer to avoid digest-check.
Additional info:
Non-FIPS RHEL8 works as expected
Updated by Leos Stejskal almost 4 years ago
- Category set to Host registration
- Assignee set to Leos Stejskal
Updated by The Foreman Bot almost 4 years ago
- Status changed from New to Ready For Testing
- Pull request https://github.com/theforeman/foreman/pull/8363 added
Updated by Leos Stejskal over 3 years ago
- Status changed from Ready For Testing to Closed
Applied in changeset foreman|c70f81b98043ad158635c5fdff77891581bc9631.