[Bug 1219384] New: [Build 20240130] openQA test fails in openssl_fips_cipher
https://bugzilla.suse.com/show_bug.cgi?id=1219384 Bug ID: 1219384 Summary: [Build 20240130] openQA test fails in openssl_fips_cipher Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other URL: https://openqa.opensuse.org/tests/3905406/modules/open ssl_fips_cipher/steps/6 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Patterns Assignee: dimstar@opensuse.org Reporter: dimstar@opensuse.org QA Contact: qa-bugs@suse.de Target Milestone: --- Found By: openQA Blocker: Yes ## Observation openssl has split out the fips providers. Trying to use openssl with fips results in FATAL: Startup failure (dev note: apps_startup()) for openssl 40C7BD59537F0000:error:12800067:DSO support routines:dlfcn_load:could not load the shared library:crypto/dso/dso_dlfcn.c:118:filename(/usr/lib64/ossl-modules/fips.so): /usr/lib64/ossl-modules/fips.so: cannot open shared object file: No such file or directory 40C7BD59537F0000:error:12800067:DSO support routines:DSO_load:could not load the shared library:crypto/dso/dso_lib.c:152: 40C7BD59537F0000:error:07880025:common libcrypto routines:provider_init:reason(524325):crypto/provider_core.c:904:name=fips 40C7BD59537F0000:error:0700006D:configuration file routines:module_run:module initialization error:crypto/conf/conf_mod.c:276:module=providers, value=provider_sect retcode=-1 The fips pattern should be responsible to pull in the fips provider in this case openQA test in scenario microos-Tumbleweed-MicroOS-Image-x86_64-microos_fips@64bit fails in [openssl_fips_cipher](https://openqa.opensuse.org/tests/3905406/modules/openssl_fips_cipher/steps/...) ## Test suite description microos FIPS enablement and some FIPS specific tests. ## Reproducible Fails since (at least) Build [20231001](https://openqa.opensuse.org/tests/3612603) ## Expected result Last good: (unknown) (or more recent) ## Further details Always latest result in this scenario: [latest](https://openqa.opensuse.org/tests/latest?arch=x86_64&distri=microos&flavor=MicroOS-Image&machine=64bit&test=microos_fips&version=Tumbleweed) -- You are receiving this mail because: You are on the CC list for the bug.
https://bugzilla.suse.com/show_bug.cgi?id=1219384 Guillaume GARDET <guillaume.gardet@arm.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |guillaume.gardet@arm.com -- You are receiving this mail because: You are on the CC list for the bug.
https://bugzilla.suse.com/show_bug.cgi?id=1219384 https://bugzilla.suse.com/show_bug.cgi?id=1219384#c2 Dominique Leuenberger <dimstar@opensuse.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |FIXED --- Comment #2 from Dominique Leuenberger <dimstar@opensuse.org> --- This bug has actually been fixed a while ago as part of patterns-base Wed Jan 31 08:23:06 UTC 2024 - Dominique Leuenberger <dimstar@opensuse.org> - patterns-base-fips: Require openssl-fips-provider when libopenssl is installed (meta package and libopenssl3) (boo#1219384). The error in openQA changed after that; so THIS bug is in fact resolved fips_provider fails QA differently now: Error setting cipher DES-EDE3-CBC 40D7805C147F0000:error:0308010C:digital envelope routines:inner_evp_generic_fetch:unsupported:crypto/evp/evp_fetch.c:341:Global default library context, Algorithm (DES-EDE3-CBC : 63), Properties () -- You are receiving this mail because: You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply@suse.com