Bug ID | 1209063 |
---|---|
Summary | [Snapshot 20230307] OpenSSH fails to start with FIPS mode enabled |
Classification | openSUSE |
Product | openSUSE Tumbleweed |
Version | Current |
Hardware | Other |
OS | Other |
Status | NEW |
Severity | Normal |
Priority | P5 - None |
Component | MicroOS |
Assignee | kubic-bugs@opensuse.org |
Reporter | jalausuch@suse.com |
QA Contact | qa-bugs@suse.de |
Found By | --- |
Blocker | --- |
When enabling FIPS on MicroOS, ssh can't be started: > sshd.service - OpenSSH Daemon > Loaded: loaded (/usr/lib/systemd/system/sshd.service; enabled; preset: enabled) > Active: failed (Result: exit-code) since Wed 2023-03-08 11:07:28 UTC; 6min ago > Process: 1082 ExecStartPre=/usr/sbin/sshd-gen-keys-start (code=exited, status=0/SUCCESS) > Process: 1091 ExecStartPre=/usr/sbin/sshd -t $SSHD_OPTS (code=exited, status=255/EXCEPTION) > CPU: 46ms > > Mar 08 11:07:28 localhost.localdomain systemd[1]: sshd.service: Scheduled restart job, restart counter is at 5. > Mar 08 11:07:28 localhost.localdomain systemd[1]: Stopped OpenSSH Daemon. > Mar 08 11:07:28 localhost.localdomain systemd[1]: sshd.service: Start request repeated too quickly. > Mar 08 11:07:28 localhost.localdomain systemd[1]: sshd.service: Failed with result 'exit-code'. > Mar 08 11:07:28 localhost.localdomain systemd[1]: Failed to start OpenSSH Daemon. > rpm -q patterns-base-fips > patterns-base-fips-20200505-39.1.x86_64 > > rpm -q openssh-fips > openssh-fips-8.9p1-7.2.x86_64 Journal errors: > > journalctl --no-pager --quiet -p err -o short-precise > Mar 08 12:13:05.705213 localhost systemd[1]: Failed to start OpenSSH Daemon. > Mar 08 12:13:05.987071 localhost systemd[1]: Failed to start OpenSSH Daemon. > Mar 08 12:13:06.381482 localhost systemd[1]: Failed to start OpenSSH Daemon. > Mar 08 12:13:06.847204 localhost.localdomain systemd[1]: Failed to start OpenSSH Daemon. > Mar 08 12:13:07.231217 localhost.localdomain systemd[1]: Failed to start OpenSSH Daemon. > Mar 08 12:13:07.450948 localhost.localdomain systemd[1]: Failed to start OpenSSH Daemon. Detailed Journal messages: > Mar 08 12:13:05.802940 localhost systemd[1]: Starting Add host ssh key fingerprint to issue file... > Mar 08 12:13:05.898348 localhost systemd[1]: sshd.service: Scheduled restart job, restart counter is at 1. > Mar 08 12:13:05.898443 localhost systemd[1]: Stopped OpenSSH Daemon. > Mar 08 12:13:05.900334 localhost systemd[1]: Starting OpenSSH Daemon... > Mar 08 12:13:05.903830 localhost sshd-gen-keys-start[1036]: Checking for missing server keys in /etc/ssh > Mar 08 12:13:05.959678 localhost systemd[1]: issue-add-ssh-keys.service: Deactivated successfully. > Mar 08 12:13:05.959748 localhost systemd[1]: Finished Add host ssh key fingerprint to issue file. > Mar 08 12:13:05.966932 localhost systemd[1]: Starting Permit User Sessions... > Mar 08 12:13:05.981236 localhost sshd[1039]: PRNG is not seeded > Mar 08 12:13:05.986973 localhost systemd[1]: sshd.service: Control process exited, code=exited, status=255/EXCEPTION > Mar 08 12:13:05.986979 localhost systemd[1]: sshd.service: Failed with result 'exit-code'. > Mar 08 12:13:05.987071 localhost systemd[1]: Failed to start OpenSSH Daemon.