Re: RHEL9?

"[email protected]" <[email protected]> Wed, 14 Jun 2023 07:20:51 -0700 (PDT)
Newsgroups gmane.comp.sysutils.cfengine.general
Message-ID <[email protected]>
You mention FIPS.  Yes, this trial RH9 installation is using FIPS.  
Nevertheless with RH8 (both with and without FIPS) we have been OK.

I'll try it without FIPS soon.

So it sounds as though CFE has some sort of RH9+FIPS bug (absent from 
RH8+FIPS) causing a segfault.

Is there a ticket for this bug?

-- David Lee


On Tuesday, 30 May 2023 at 04:50:44 UTC+1 [email protected] wrote:

> On Thu, 2023-05-25 at 08:15 -0700, [email protected] wrote:
> > Any progress on this yet?  It is still coredumping.
> > 
> > At last, I've been able to build CFE from source on RHEL9.   ("git
> > pull" yesterday, so decently up-to-date.)   On "./configure" I used
> > "--enable-debug-yes" to try to get more information from gdb, and did
> > a "make install".
> > 
> > Running under gdb gives some information additional to what I got
> > above.
> > 
> > (gdb) run -KI --bootstrap=cph-mpf
> > ...
> > (gdb) bt
> > #0  0x0000000000000000 in ?? ()
> > #1  0x00007ffff7eb3785 in PromiseRuntimeHash (pp=0x564800, 
> >     salt=0x7fffffffc800 "method_Check Keys_", digest=0x7fffffff8f40
> > "", 
> >     type=HASH_METHOD_MD5) at locks.c:675
> Oh! If your RHEL 9 machine runs OpenSSL 3, MD5 may not be supported at
> all. Or, by any chance, is your machine running in FIPS mode?
>
> CFEngine Enterprise uses SHA256 instead.
>
> --
> Vratislav
>
>

-- 
You received this message because you are subscribed to the Google Groups "help-cfengine" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [email protected].
To view this discussion on the web visit https://groups.google.com/d/msgid/help-cfengine/1a1a8930-7327-4932-adc8-8d0b2d1effb2n%40googlegroups.com.