CFEngine running under FIPS
"'Nick Anderson' via help-cfengine" <[email protected]> Fri, 24 Jan 2025 12:38:30 -0600
| Newsgroups | gmane.comp.sysutils.cfengine.general |
|---|---|
| Message-ID | <[email protected]> |
--=-=-=
Content-Type: multipart/alternative; boundary="==-=-="
--==-=-=
Content-Type: text/plain; charset="UTF-8"
Hi,
We're running into a problem running CFEngine on Red Hat
linux under FIPS, using the rpm packages downloaded from
<https://cfengine.com/downloads/cfengine-community/>
The same problem doesn't appear to be present in the rpm
packages as downloaded from the yum repo described there.
It's expected that CFEngine Community doesn't function when FIPS mode
is enabled but CFEngine Enterprise does work. It's strange and
unexpected that you see any difference in the behavior of Community if
using the same package downloaded from a different source.
Is it possible for us to override the default digest used?
Or is there something else we can do to fix the default
behaviour?
Any help would be appreciated.
It's open code, so you could certainly modify it, but CFEngine
Enterprise would be my recommendation.
--
You received this message because you are subscribed to the Google Groups "help-cfengine" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [email protected].
To view this discussion visit https://groups.google.com/d/msgid/help-cfengine/878qr0qcop.fsf%40northern.tech.
--==-=-=
Content-Type: text/html; charset="UTF-8"
<blockquote style="border-left: 2px solid gray; padding-left: 4px;">
<p>
Hi,
</p>
<p>
We're running into a problem running CFEngine on Red Hat linux under FIPS, using the rpm packages downloaded from
<a href="https://cfengine.com/downloads/cfengine-community/">https://cfengine.com/downloads/cfengine-community/</a>
</p>
<p>
The same problem doesn't appear to be present in the rpm packages as downloaded from the yum repo described there.
</p>
</blockquote>
<p>
It's expected that CFEngine Community doesn't function when FIPS mode is enabled but CFEngine Enterprise does work.
It's strange and unexpected that you see any difference in the behavior of Community if using the same package downloaded from a different source.
</p>
<blockquote style="border-left: 2px solid gray; padding-left: 4px;">
<p>
Is it possible for us to override the default digest used? Or is there something else we can do to fix the default behaviour?
</p>
<p>
Any help would be appreciated.
</p>
</blockquote>
<p>
It's open code, so you could certainly modify it, but CFEngine Enterprise would be my recommendation.
</p>
<p></p>
-- <br />
You received this message because you are subscribed to the Google Groups "help-cfengine" group.<br />
To unsubscribe from this group and stop receiving emails from it, send an email to <a href="mailto:[email protected]">[email protected]</a>.<br />
To view this discussion visit <a href="https://groups.google.com/d/msgid/help-cfengine/878qr0qcop.fsf%40northern.tech?utm_medium=email&utm_source=footer">https://groups.google.com/d/msgid/help-cfengine/878qr0qcop.fsf%40northern.tech</a>.<br />
--==-=-=--
--=-=-=
Content-Type: text/plain; charset="UTF-8"
--
Nick Anderson | Doer of Things | (+1) 785-550-1767 | https://northern.tech
--
You received this message because you are subscribed to the Google Groups "help-cfengine" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [email protected].
To view this discussion visit https://groups.google.com/d/msgid/help-cfengine/878qr0qcop.fsf%40northern.tech.
--=-=-=--