Re: CFEngine running under FIPS

"'Alex Malowany' via help-cfengine" <[email protected]> Mon, 27 Jan 2025 01:24:01 -0800 (PST)
Newsgroups gmane.comp.sysutils.cfengine.general
Message-ID <[email protected]>
------=_Part_190392_323180724.1737969841451
Content-Type: multipart/alternative; 
	boundary="----=_Part_190393_1837088189.1737969841451"

------=_Part_190393_1837088189.1737969841451
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

Thank you, I'll take that back to the team.

On Friday, January 24, 2025 at 6:39:09=E2=80=AFPM UTC [email protected]=
ch wrote:

> Hi,=20
>
> We're running into a problem running CFEngine on Red Hat linux under FIPS=
,=20
> using the rpm packages downloaded from=20
> https://cfengine.com/downloads/cfengine-community/=20
>
> The same problem doesn't appear to be present in the rpm packages as=20
> downloaded from the yum repo described there.=20
>
> It's expected that CFEngine Community doesn't function when FIPS mode is=
=20
> enabled but CFEngine Enterprise does work. It's strange and unexpected th=
at=20
> you see any difference in the behavior of Community if using the same=20
> package downloaded from a different source.=20
>
> Is it possible for us to override the default digest used? Or is there=20
> something else we can do to fix the default behaviour?=20
>
> Any help would be appreciated.=20
>
> It's open code, so you could certainly modify it, but CFEngine Enterprise=
=20
> would be my recommendation.=20
>

--=20
You received this message because you are subscribed to the Google Groups "=
help-cfengine" group.
To unsubscribe from this group and stop receiving emails from it, send an e=
mail to [email protected].
To view this discussion visit https://groups.google.com/d/msgid/help-cfengi=
ne/46d53877-9ffc-4b71-a4f9-1ff6ea7c7a14n%40googlegroups.com.

------=_Part_190393_1837088189.1737969841451
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

Thank you, I'll take that back to the team.<br /><br /><div class=3D"gmail_=
quote"><div dir=3D"auto" class=3D"gmail_attr">On Friday, January 24, 2025 a=
t 6:39:09=E2=80=AFPM UTC [email protected] wrote:<br/></div><blockquo=
te class=3D"gmail_quote" style=3D"margin: 0 0 0 0.8ex; border-left: 1px sol=
id rgb(204, 204, 204); padding-left: 1ex;"><blockquote style=3D"border-left=
:2px solid gray;padding-left:4px">
<p>
Hi,
</p>

<p>
We&#39;re running into a problem running CFEngine on Red Hat linux under FI=
PS, using the rpm packages downloaded from
<a href=3D"https://cfengine.com/downloads/cfengine-community/" target=3D"_b=
lank" rel=3D"nofollow" data-saferedirecturl=3D"https://www.google.com/url?h=
l=3Den&amp;q=3Dhttps://cfengine.com/downloads/cfengine-community/&amp;sourc=
e=3Dgmail&amp;ust=3D1738055790370000&amp;usg=3DAOvVaw3IPtqlDAFtZQoRcchCKIG_=
">https://cfengine.com/downloads/cfengine-community/</a>
</p>

<p>
The same problem doesn&#39;t appear to be present in the rpm packages as do=
wnloaded from the yum repo described there.
</p>
</blockquote>

<p>
It&#39;s expected that CFEngine Community doesn&#39;t function when FIPS mo=
de is enabled but CFEngine Enterprise does work.
It&#39;s strange and unexpected that you see any difference in the behavior=
 of Community if using the same package downloaded from a different source.
</p>

<blockquote style=3D"border-left:2px solid gray;padding-left:4px">
<p>
Is it possible for us to override the default digest used? Or is there some=
thing else we can do to fix the default behaviour?
</p>

<p>
Any help would be appreciated.
</p>
</blockquote>

<p>
It&#39;s open code, so you could certainly modify it, but CFEngine Enterpri=
se would be my recommendation.
</p>
</blockquote></div>

<p></p>

-- <br />
You received this message because you are subscribed to the Google Groups &=
quot;help-cfengine&quot; group.<br />
To unsubscribe from this group and stop receiving emails from it, send an e=
mail to <a href=3D"mailto:[email protected]">help-=
[email protected]</a>.<br />
To view this discussion visit <a href=3D"https://groups.google.com/d/msgid/=
help-cfengine/46d53877-9ffc-4b71-a4f9-1ff6ea7c7a14n%40googlegroups.com?utm_=
medium=3Demail&utm_source=3Dfooter">https://groups.google.com/d/msgid/help-=
cfengine/46d53877-9ffc-4b71-a4f9-1ff6ea7c7a14n%40googlegroups.com</a>.<br /=
>

------=_Part_190393_1837088189.1737969841451--

------=_Part_190392_323180724.1737969841451--