Ask Your Question
0

Get all flavour failed as FIPS is enabled

asked 2015-01-10 09:36:29 -0500

Vinoth K G gravatar image

updated 2015-01-10 09:38:40 -0500

As part of heat stack creation, we are getting below error. Basically, /usr/lib/python2.6/site-packages/novaclient/base.py uses md5 which is not allowed in FIPS enabled servers. Is there a way we can resolve this without disabling FIPS?

2015-01-09 06:03:23.576 20754 TRACE heat.engine.resource File "/usr/lib/python2.6/site-packages/novaclient/base.py", line 107, in completion_cache

2015-01-09 06:03:23.576 20754 TRACE heat.engine.resource url.encode('utf-8')).hexdigest()

2015-01-09 06:03:23.576 20754 TRACE heat.engine.resource ValueError: error:060800A3:digital envelope routines:EVP_DigestInit_ex:disabled for fips

2015-01-09 06:03:22.774 20754 INFO urllib3.connectionpool [-] Starting new HTTP connection (1): 172.20.131.11

2015-01-09 06:03:23.570 20754 DEBUG urllib3.connectionpool [-] "GET /api/v2/Entstore/flavors/detail HTTP/1.1" 200 3465 _make_request /usr/lib/python2.6/site-packages/urllib3/connectionpool.py:295

2015-01-09 06:03:23.576 20754 ERROR heat.engine.resource [-] CREATE : Server "baretestservice_test9_1"

2015-01-09 06:03:23.576 20754 TRACE heat.engine.resource Traceback (most recent call last):

2015-01-09 06:03:23.576 20754 TRACE heat.engine.resource File "/usr/lib/python2.6/site-packages/heat/engine/resource.py", line 379, in _do_action

2015-01-09 06:03:23.576 20754 TRACE heat.engine.resource handle_data = handle()

2015-01-09 06:03:23.576 20754 TRACE heat.engine.resource File "/usr/lib/python2.6/site-packages/heat/engine/resources/server.py", line 241, in handle_create

2015-01-09 06:03:23.576 20754 TRACE heat.engine.resource flavor_id = nova_utils.get_flavor_id(self.nova(), flavor)

2015-01-09 06:03:23.576 20754 TRACE heat.engine.resource File "/usr/lib/python2.6/site-packages/heat/engine/resources/nova_utils.py", line 101, in get_flavor_id

2015-01-09 06:03:23.576 20754 TRACE heat.engine.resource flavor_list = nova_client.flavors.list()

2015-01-09 06:03:23.576 20754 TRACE heat.engine.resource File "/usr/lib/python2.6/site-packages/novaclient/v1_1/flavors.py", line 122, in list

2015-01-09 06:03:23.576 20754 TRACE heat.engine.resource return self._list("/flavors%s%s" % (detail, query_string), "flavors")

2015-01-09 06:03:23.576 20754 TRACE heat.engine.resource File "/usr/lib/python2.6/site-packages/novaclient/base.py", line 78, in _list

2015-01-09 06:03:23.576 20754 TRACE heat.engine.resource with self.completion_cache('human_id', obj_class, mode="w"):

2015-01-09 06:03:23.576 20754 TRACE heat.engine.resource File "/usr/lib64/python2.6/contextlib.py", line 16, in __enter__

2015-01-09 06:03:23.576 20754 TRACE heat.engine.resource return self.gen.next()

2015-01-09 06:03:23.576 20754 TRACE heat.engine.resource File "/usr/lib/python2.6/site-packages/novaclient/base.py", line 107, in completion_cache

*> 2015-01-09 06:03:23.576 20754 TRACE heat.engine.resource
url.encode('utf-8')).hexdigest()

2015-01-09 06:03:23.576 20754 TRACE heat.engine.resource ValueError: error:060800A3:digital envelope routines:EVP_DigestInit_ex:disabled for fips*

2015-01-09 06:03:23.576 20754 TRACE heat.engine.resource

2015-01-09 06:03:23.613 20754 DEBUG heat.engine.scheduler [-] Task resource_action cancelled cancel /usr/lib/python2.6/site-packages/heat/engine/scheduler.py:187

edit retag flag offensive close merge delete

Comments

We have modified novaclient/base.py and keystoneclient/util.py to use sha1

Vinoth K G gravatar imageVinoth K G ( 2015-03-09 09:02:38 -0500 )edit

1 answer

Sort by ยป oldest newest most voted
0

answered 2015-03-09 09:02:48 -0500

Vinoth K G gravatar image

We have modified novaclient/base.py and keystoneclient/util.py to use sha1

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Get to know Ask OpenStack

Resources for moderators

Question Tools

1 follower

Stats

Asked: 2015-01-10 09:36:29 -0500

Seen: 369 times

Last updated: Mar 09 '15