Project

General

Custom queries

Profile

Actions
Copy link

Feature #3511

closed

As a security person, I would like Foreman to run in FIPS mode

Added by Anonymous over 11 years ago. Updated over 6 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
-
Category:
Security
Target version:
-
Difficulty:
Triaged:
No
Bugzilla link:
Pull request:
Fixed in Releases:
1.20.0
Found in Releases:
Red Hat JIRA:

Related issues 26 (5 open — 21 closed)

Related to Katello - Feature #5313: FIPS compliancyRejectedActions
Related to Foreman - Feature #21748: Replace crypto- and hash-functions unapproved by FIPS with FIPS-approved onesClosed11/23/2017Actions
Related to Foreman - Feature #21749: Create CI environment with FIPS enabledNew11/23/2017Actions
Related to Foreman - Feature #21750: Investigate Rails caching with FIPS enabledResolved11/23/2017Actions
Related to Foreman - Feature #21751: Investigate interoperability with Salt with FIPS enabledNew11/23/2017Actions
Related to Foreman - Feature #21752: Investigate interoperability with BMC/IPMI with FIPS enabledNew11/23/2017Actions
Related to Foreman - Feature #21753: Introduce verification of 3rd-party ssl certificates for FIPS-approved hash functionsNew11/23/2017Actions
Related to Foreman - Feature #21754: Investigate interoperability with Puppet with FIPS enabledResolved11/23/2017Actions
Related to Installer - Feature #21755: Update dhcpd puppet module to use FIPS-approved hash function for omapi shared secretClosedEwoud Kohl van Wijngaarden11/23/2017Actions
Related to Installer - Feature #21756: Update bind puppet module to use FIPS-approved hash function for dhcpd shared secretRejected11/23/2017Actions
Related to Foreman - Feature #21875: Add support for sha512 grub passwords to provisioning templatesClosed12/05/2017Actions
Related to Katello - Bug #23363: Katello uses md5hash function incompatible with FIPS-enabled environmentsClosed04/23/2018Actions
Related to Katello - Bug #24732: FIPS Scheduled synchronization task ends with PG::UniqueViolation: ERROR: duplicate key value violates unique constraint "index_katello_repository_rpms_on_rpm_id_and_repository_id"ResolvedSamir JhaActions
Related to Katello - Bug #24889: Docker repository sync on FIPS system fails with TypeError: can't quote ActiveSupport::HashWithIndifferentAccessResolvedActions
Related to Installer - Bug #24974: The kafo configure is generating incorrect 'foreman-proxy-client-bundle.pem' which is not allowing httpd service to startDuplicateIvan NecasActions
Related to Foreman - Feature #26203: Allow provisioning hosts into FIPS modeClosedMarek HulánActions
Related to Discovery - Feature #26204: Allow provisioning hosts into FIPS modeClosedIvan NecasActions
Related to Installer - Bug #26088: httpd fails to start after installing capsule in FIPS modeClosedIvan NecasActions
Has duplicate Foreman - Bug #12314: Foreman does not work with FIPS enabledDuplicate10/26/2015Actions
Blocked by Foreman - Bug #22583: Replace MD5 by SHA1 for apipie cache checksumClosedIvan Necas02/14/2018Actions
Blocked by Foreman - Bug #23128: Deface uses MD5 and doesn't work in FIPS-enable environmentResolvedActions
Blocked by OpenSCAP - Bug #23130: unable to install theforeman-foreman_scap_client in FIPS-enabled environmentRejected04/05/2018Actions
Blocked by Packaging - Bug #23312: angular-rails-templates uses MD5 causing problems FIPS-enabled envrionmentsClosedActions
Blocked by Foreman - Tracker #21834: Rails 5.2 upgrade tasksClosed

Actions
Blocked by Foreman - Feature #22119: Replace MD5 hashes with SHAClosedIvan NecasActions
Blocked by Foreman - Bug #25447: Unable to create puppet certificate request from RHEL5 with fips enabledNewActions
#2

Updated by Eric Helms over 9 years ago

#3

Updated by Dominic Cleal over 9 years ago

  • Has duplicate Bug #12314: Foreman does not work with FIPS enabled added
#7

Updated by James Shewey over 7 years ago

  • Subject changed from As a securiyt person, I would like Foreman to run in FIPS mode to As a security person, I would like Foreman to run in FIPS mode
#8

Updated by Anonymous over 7 years ago

  • Related to Feature #21748: Replace crypto- and hash-functions unapproved by FIPS with FIPS-approved ones added
#9

Updated by Anonymous over 7 years ago

  • Related to Feature #21749: Create CI environment with FIPS enabled added
#10

Updated by Anonymous over 7 years ago

  • Related to Feature #21750: Investigate Rails caching with FIPS enabled added
#11

Updated by Anonymous over 7 years ago

  • Related to Feature #21751: Investigate interoperability with Salt with FIPS enabled added
#12

Updated by Anonymous over 7 years ago

  • Related to Feature #21752: Investigate interoperability with BMC/IPMI with FIPS enabled added
#13

Updated by Anonymous over 7 years ago

  • Related to Feature #21753: Introduce verification of 3rd-party ssl certificates for FIPS-approved hash functions added
#14

Updated by Anonymous over 7 years ago

  • Related to Feature #21754: Investigate interoperability with Puppet with FIPS enabled added
#15

Updated by Anonymous over 7 years ago

  • Related to Feature #21755: Update dhcpd puppet module to use FIPS-approved hash function for omapi shared secret added
#16

Updated by Anonymous over 7 years ago

  • Related to Feature #21756: Update bind puppet module to use FIPS-approved hash function for dhcpd shared secret added
#18

Updated by Anonymous over 7 years ago

  • Related to Feature #21875: Add support for sha512 grub passwords to provisioning templates added
#19

Updated by Ivan Necas about 7 years ago

  • Blocked by Bug #22583: Replace MD5 by SHA1 for apipie cache checksum added
#20

Updated by Ivan Necas about 7 years ago

  • Blocked by Bug #23128: Deface uses MD5 and doesn't work in FIPS-enable environment added
#21

Updated by Peter Ondrejka about 7 years ago

  • Blocked by Bug #23130: unable to install theforeman-foreman_scap_client in FIPS-enabled environment added
#22

Updated by Peter Ondrejka about 7 years ago

  • Blocked by Bug #23312: angular-rails-templates uses MD5 causing problems FIPS-enabled envrionments added
#23

Updated by Peter Ondrejka about 7 years ago

  • Related to Bug #23363: Katello uses md5hash function incompatible with FIPS-enabled environments added
#24

Updated by Anonymous about 7 years ago

#25

Updated by Peter Ondrejka over 6 years ago

  • Related to Bug #24732: FIPS Scheduled synchronization task ends with PG::UniqueViolation: ERROR: duplicate key value violates unique constraint "index_katello_repository_rpms_on_rpm_id_and_repository_id" added
#26

Updated by Peter Ondrejka over 6 years ago

  • Related to Bug #24889: Docker repository sync on FIPS system fails with TypeError: can't quote ActiveSupport::HashWithIndifferentAccess added
#27

Updated by Ivan Necas over 6 years ago

#29

Updated by Anonymous over 6 years ago

  • Status changed from New to Resolved
  • Fixed in Releases 1.20.0 added
#30

Updated by Ondřej Pražák over 6 years ago

  • Blocked by Bug #25447: Unable to create puppet certificate request from RHEL5 with fips enabled added
#31

Updated by Ivan Necas about 6 years ago

  • Related to Bug #24974: The kafo configure is generating incorrect 'foreman-proxy-client-bundle.pem' which is not allowing httpd service to start added
#32

Updated by Ivan Necas about 6 years ago

  • Related to Feature #26203: Allow provisioning hosts into FIPS mode added
#33

Updated by Ivan Necas about 6 years ago

  • Related to Feature #26204: Allow provisioning hosts into FIPS mode added
#34

Updated by Ewoud Kohl van Wijngaarden about 6 years ago

  • Related to Bug #26088: httpd fails to start after installing capsule in FIPS mode added
Actions
Copy link

Also available in: Atom PDF