CFEngine running under FIPS

"'Nick Anderson' via help-cfengine" <[email protected]> Fri, 24 Jan 2025 12:38:30 -0600
Newsgroups gmane.comp.sysutils.cfengine.general
Message-ID <[email protected]>
--=-=-=
Content-Type: multipart/alternative; boundary="==-=-="

--==-=-=
Content-Type: text/plain; charset="UTF-8"

        Hi,

        We're running into a problem running CFEngine on Red Hat
        linux under FIPS, using the rpm packages downloaded from
        <https://cfengine.com/downloads/cfengine-community/>

        The same problem doesn't appear to be present in the rpm
        packages as downloaded from the yum repo described there.

  It's expected that CFEngine Community doesn't function when FIPS mode
  is enabled but CFEngine Enterprise does work. It's strange and
  unexpected that you see any difference in the behavior of Community if
  using the same package downloaded from a different source.

        Is it possible for us to override the default digest used?
        Or is there something else we can do to fix the default
        behaviour?

        Any help would be appreciated.

  It's open code, so you could certainly modify it, but CFEngine
  Enterprise would be my recommendation.

-- 
You received this message because you are subscribed to the Google Groups "help-cfengine" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [email protected].
To view this discussion visit https://groups.google.com/d/msgid/help-cfengine/878qr0qcop.fsf%40northern.tech.

--==-=-=
Content-Type: text/html; charset="UTF-8"

<blockquote style="border-left: 2px solid gray; padding-left: 4px;">
<p>
Hi,
</p>

<p>
We're running into a problem running CFEngine on Red Hat linux under FIPS, using the rpm packages downloaded from
<a href="https://cfengine.com/downloads/cfengine-community/">https://cfengine.com/downloads/cfengine-community/</a>
</p>

<p>
The same problem doesn't appear to be present in the rpm packages as downloaded from the yum repo described there.
</p>
</blockquote>

<p>
It's expected that CFEngine Community doesn't function when FIPS mode is enabled but CFEngine Enterprise does work.
It's strange and unexpected that you see any difference in the behavior of Community if using the same package downloaded from a different source.
</p>

<blockquote style="border-left: 2px solid gray; padding-left: 4px;">
<p>
Is it possible for us to override the default digest used? Or is there something else we can do to fix the default behaviour?
</p>

<p>
Any help would be appreciated.
</p>
</blockquote>

<p>
It's open code, so you could certainly modify it, but CFEngine Enterprise would be my recommendation.
</p>

<p></p>

-- <br />
You received this message because you are subscribed to the Google Groups &quot;help-cfengine&quot; group.<br />
To unsubscribe from this group and stop receiving emails from it, send an email to <a href="mailto:[email protected]">[email protected]</a>.<br />
To view this discussion visit <a href="https://groups.google.com/d/msgid/help-cfengine/878qr0qcop.fsf%40northern.tech?utm_medium=email&utm_source=footer">https://groups.google.com/d/msgid/help-cfengine/878qr0qcop.fsf%40northern.tech</a>.<br />

--==-=-=--

--=-=-=
Content-Type: text/plain; charset="UTF-8"




--
Nick Anderson | Doer of Things | (+1) 785-550-1767 | https://northern.tech

-- 
You received this message because you are subscribed to the Google Groups "help-cfengine" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [email protected].
To view this discussion visit https://groups.google.com/d/msgid/help-cfengine/878qr0qcop.fsf%40northern.tech.

--=-=-=--