Project

General

Profile

Actions

Bug #31992

closed

Global Registration: of FIPS RHEL8 host fails with Transaction error: no digest

Added by Leos Stejskal almost 4 years ago. Updated over 3 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Category:
Host registration
Target version:
-
Difficulty:
Triaged:
No
Fixed in Releases:
Found in Releases:

Description

Cloned from https://bugzilla.redhat.com/show_bug.cgi?id=1923320

Description of problem:

Run global registration curl command on FIPS-enabled RHEL8 host. The process fails on katello-ca-consumer installation step with:

Running transaction test
Error: Transaction test error:
package katello-ca-consumer-hostname.redhat.com-1.0-1.noarch does not verify: no digest

This has been described before for RHEL8 FIPS, see https://access.redhat.com/solutions/4460971

The suggested workaround from the kcs is using "rpm -ivh --nodigest --nofiledigest" but I'm not sure if we even want to handle the issue within the template.

Version-Release number of selected component (if applicable):
Satellite 6.9 snap 11

How reproducible:
always

Actual results:
described above

Expected results:
To be establised. Probably some logic in the template to trigger a workaround or at least a user warning and link to the kcs. Alternatively, we could find a way to rebuild katello-ca-consumer to avoid digest-check.

Additional info:
Non-FIPS RHEL8 works as expected

Actions

Also available in: Atom PDF