Project

Profile

Help

Issue #9249

closed

ValueError: _blake2 is not available in FIPS mode

Added by daviddavis over 2 years ago. Updated over 2 years ago.

Status:
CLOSED - CURRENTRELEASE
Priority:
Normal
Assignee:
Category:
-
Sprint/Milestone:
Start date:
Due date:
Estimated time:
Severity:
2. Medium
Version:
Platform Release:
OS:
Triaged:
Yes
Groomed:
No
Sprint Candidate:
No
Tags:
Sprint:
Sprint 103
Quarter:

Description

Aug 17 19:46:43 dhcp-3-98.vms.sat.rdu2.redhat.com pulpcore-worker-1[964]: Traceback (most recent call last):
Aug 17 19:46:43 dhcp-3-98.vms.sat.rdu2.redhat.com pulpcore-worker-1[964]: File "/usr/bin/pulpcore-worker", line 11, in <module>
Aug 17 19:46:43 dhcp-3-98.vms.sat.rdu2.redhat.com pulpcore-worker-1[964]: load_entry_point('pulpcore==3.14.3', 'console_scripts', 'pulpcore-worker')()
Aug 17 19:46:43 dhcp-3-98.vms.sat.rdu2.redhat.com pulpcore-worker-1[964]: File "/usr/lib/python3.6/site-packages/click/core.py", line 829, in __call__
Aug 17 19:46:43 dhcp-3-98.vms.sat.rdu2.redhat.com pulpcore-worker-1[964]: return self.main(*args, **kwargs)
Aug 17 19:46:43 dhcp-3-98.vms.sat.rdu2.redhat.com pulpcore-worker-1[964]: File "/usr/lib/python3.6/site-packages/click/core.py", line 782, in main
Aug 17 19:46:43 dhcp-3-98.vms.sat.rdu2.redhat.com pulpcore-worker-1[964]: rv = self.invoke(ctx)
Aug 17 19:46:43 dhcp-3-98.vms.sat.rdu2.redhat.com pulpcore-worker-1[964]: File "/usr/lib/python3.6/site-packages/click/core.py", line 1066, in invoke
Aug 17 19:46:43 dhcp-3-98.vms.sat.rdu2.redhat.com pulpcore-worker-1[964]: return ctx.invoke(self.callback, **ctx.params)
Aug 17 19:46:43 dhcp-3-98.vms.sat.rdu2.redhat.com pulpcore-worker-1[964]: File "/usr/lib/python3.6/site-packages/click/core.py", line 610, in invoke
Aug 17 19:46:43 dhcp-3-98.vms.sat.rdu2.redhat.com pulpcore-worker-1[964]: return callback(*args, **kwargs)
Aug 17 19:46:43 dhcp-3-98.vms.sat.rdu2.redhat.com pulpcore-worker-1[964]: File "/usr/lib/python3.6/site-packages/pulpcore/tasking/entrypoint.py", line 45, in worker
Aug 17 19:46:43 dhcp-3-98.vms.sat.rdu2.redhat.com pulpcore-worker-1[964]: NewPulpWorker().run_forever()
Aug 17 19:46:43 dhcp-3-98.vms.sat.rdu2.redhat.com pulpcore-worker-1[964]: File "/usr/lib/python3.6/site-packages/pulpcore/tasking/pulpcore_worker.py", line 220, in run_forever
Aug 17 19:46:43 dhcp-3-98.vms.sat.rdu2.redhat.com pulpcore-worker-1[964]: for task in self.iter_tasks():
Aug 17 19:46:43 dhcp-3-98.vms.sat.rdu2.redhat.com pulpcore-worker-1[964]: File "/usr/lib/python3.6/site-packages/pulpcore/tasking/pulpcore_worker.py", line 115, in iter_tasks
Aug 17 19:46:43 dhcp-3-98.vms.sat.rdu2.redhat.com pulpcore-worker-1[964]: with suppress(AdvisoryLockError), task:
Aug 17 19:46:43 dhcp-3-98.vms.sat.rdu2.redhat.com pulpcore-worker-1[964]: File "/usr/lib/python3.6/site-packages/pulpcore/app/models/task.py", line 289, in __enter__
Aug 17 19:46:43 dhcp-3-98.vms.sat.rdu2.redhat.com pulpcore-worker-1[964]: self.lock = _hash_to_u64(str(self.pk))
Aug 17 19:46:43 dhcp-3-98.vms.sat.rdu2.redhat.com pulpcore-worker-1[964]: File "/usr/lib/python3.6/site-packages/pulpcore/app/models/task.py", line 213, in _hash_to_u64
Aug 17 19:46:43 dhcp-3-98.vms.sat.rdu2.redhat.com pulpcore-worker-1[964]: _digest = blake2s(value.encode(), digest_size=8).digest()
Aug 17 19:46:43 dhcp-3-98.vms.sat.rdu2.redhat.com pulpcore-worker-1[964]: ValueError: _blake2 is not available in FIPS mode

Related issues

Copied to Pulp - Backport #9288: Backport "ValueError: _blake2 is not available in FIPS mode" to 3.14.zCLOSED - CURRENTRELEASEmdellweg

Actions
Actions #2

Updated by fao89 over 2 years ago

I got a different error:

Aug 18 21:37:09 pulp3-source-centos8-fips.localhost.example.com pulpcore-worker[68903]: Traceback (most recent call last):                                                                   
Aug 18 21:37:09 pulp3-source-centos8-fips.localhost.example.com pulpcore-worker[68903]:   File "/usr/local/lib/pulp/bin/pulpcore-worker", line 33, in <module>                               
Aug 18 21:37:09 pulp3-source-centos8-fips.localhost.example.com pulpcore-worker[68903]:     sys.exit(load_entry_point('pulpcore', 'console_scripts', 'pulpcore-worker')())                   
Aug 18 21:37:09 pulp3-source-centos8-fips.localhost.example.com pulpcore-worker[68903]:   File "/usr/local/lib/pulp/lib64/python3.8/site-packages/click/core.py", line 1137, in __call__     
Aug 18 21:37:09 pulp3-source-centos8-fips.localhost.example.com pulpcore-worker[68903]:     return self.main(*args, **kwargs)                                                                
Aug 18 21:37:09 pulp3-source-centos8-fips.localhost.example.com pulpcore-worker[68903]:   File "/usr/local/lib/pulp/lib64/python3.8/site-packages/click/core.py", line 1062, in main         
Aug 18 21:37:09 pulp3-source-centos8-fips.localhost.example.com pulpcore-worker[68903]:     rv = self.invoke(ctx)                                                                            
Aug 18 21:37:09 pulp3-source-centos8-fips.localhost.example.com pulpcore-worker[68903]:   File "/usr/local/lib/pulp/lib64/python3.8/site-packages/click/core.py", line 1404, in invoke       
Aug 18 21:37:09 pulp3-source-centos8-fips.localhost.example.com pulpcore-worker[68903]:     return ctx.invoke(self.callback, **ctx.params)                                                   
Aug 18 21:37:09 pulp3-source-centos8-fips.localhost.example.com pulpcore-worker[68903]:   File "/usr/local/lib/pulp/lib64/python3.8/site-packages/click/core.py", line 763, in invoke        
Aug 18 21:37:09 pulp3-source-centos8-fips.localhost.example.com pulpcore-worker[68903]:     return __callback(*args, **kwargs)                                                               
Aug 18 21:37:09 pulp3-source-centos8-fips.localhost.example.com pulpcore-worker[68903]:   File "/home/vagrant/devel/pulpcore/pulpcore/tasking/entrypoint.py", line 45, in worker             
Aug 18 21:37:09 pulp3-source-centos8-fips.localhost.example.com pulpcore-worker[68903]:     NewPulpWorker().run_forever()                                                                    
Aug 18 21:37:09 pulp3-source-centos8-fips.localhost.example.com pulpcore-worker[68903]:   File "/home/vagrant/devel/pulpcore/pulpcore/tasking/pulpcore_worker.py", line 245, in run_forever  
Aug 18 21:37:09 pulp3-source-centos8-fips.localhost.example.com pulpcore-worker[68903]:     for task in self.iter_tasks():                                                                   
Aug 18 21:37:09 pulp3-source-centos8-fips.localhost.example.com pulpcore-worker[68903]:   File "/home/vagrant/devel/pulpcore/pulpcore/tasking/pulpcore_worker.py", line 138, in iter_tasks   
Aug 18 21:37:09 pulp3-source-centos8-fips.localhost.example.com pulpcore-worker[68903]:     with suppress(AdvisoryLockError), task:                                                          
Aug 18 21:37:09 pulp3-source-centos8-fips.localhost.example.com pulpcore-worker[68903]:   File "/home/vagrant/devel/pulpcore/pulpcore/app/models/task.py", line 305, in __enter__            
Aug 18 21:37:09 pulp3-source-centos8-fips.localhost.example.com pulpcore-worker[68903]:     self.lock = _hash_to_u64(str(self.pk))                                                           
Aug 18 21:37:09 pulp3-source-centos8-fips.localhost.example.com pulpcore-worker[68903]:   File "/home/vagrant/devel/pulpcore/pulpcore/app/models/task.py", line 229, in _hash_to_u64         
Aug 18 21:37:09 pulp3-source-centos8-fips.localhost.example.com pulpcore-worker[68903]:     _digest = blake2s(value.encode(), digest_size=8).digest()                                        
Aug 18 21:37:09 pulp3-source-centos8-fips.localhost.example.com pulpcore-worker[68903]: TypeError: 'digest_size' is an invalid keyword argument for openssl_blake2s()                        

Actions #3

Updated by mdellweg over 2 years ago

  • Status changed from NEW to ASSIGNED
  • Assignee set to mdellweg
Actions #4

Updated by pulpbot over 2 years ago

  • Status changed from ASSIGNED to POST
Actions #5

Updated by ttereshc over 2 years ago

  • Copied to Backport #9288: Backport "ValueError: _blake2 is not available in FIPS mode" to 3.14.z added
Actions #7

Updated by fao89 over 2 years ago

  • Triaged changed from No to Yes
  • Sprint set to Sprint 103

Added by mdellweg over 2 years ago

Revision 1d77e5cd | View on GitHub

Stop using blake2s to calulate lock identifiers

Instead perform a simple xor on the first and second half of the task uuid.

fixes #9249

Actions #8

Updated by mdellweg over 2 years ago

  • Status changed from POST to MODIFIED
Actions #9

Updated by pulpbot over 2 years ago

  • Sprint/Milestone set to 3.15.0
Actions #10

Updated by pulpbot over 2 years ago

  • Status changed from MODIFIED to CLOSED - CURRENTRELEASE

Also available in: Atom PDF