rwdj commented on issue #6246: URL: https://github.com/apache/cloudstack/issues/6246#issuecomment-1096836700
A general rule of thumb: if the word "MD5" is ever mentioned at any point, then you'll run into a FIPS issue. FIPS machines aren't able to use MD5 at all. Based on the stacktrace, Java looks to me like it's trying to find files relating to MD5 and they aren't found because Java is running in FIPS-mode. The missing file NONE should be the mentioned "SecretKeyFactory" for PBEWithMD5AndDES, but I'm unaware of the technical details of Java's cipher algorithms. ~~~ [rwdj@rwdj ~]$ openssl md5 Error setting digest 140235974117184:error:060800C8:digital envelope routines:EVP_DigestInit_ex:disabled for FIPS:crypto/evp/digest.c:135: ~~~ And then there's the issue where it won't compile, flat out refusing on the tests due to FIPS being enabled. FIPS is a Category 1 (almost no exceptions given) specification of DISA's [Security Technical Implementation Guides](https://public.cyber.mil/stigs/): https://www.stigviewer.com/stig/red_hat_enterprise_linux_8/2021-12-03/finding/V-230223 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
