aws / aws/aws-sam-cli

FATAL FIPS SELFTEST FAILURE - RHEL 8 Install

Open
#4,618 7 comments 0 reactions 0 assignees View on GitHub
area/installation pyinstaller/linux/x86
Dominant language
Python
Stars
6.7k
Forks
1.2k
Avg merge
1d 10h
Merged PRs (30d)
52

Description

### Research
Wasn't able to find a related issue in Github. Web search on the FIPS Self Test failure also did not show any useful results.

### Description: Install problems on a RHEL 8 system.

First issue:
sudo ./sam-installation/install results in:
fips.c(145): OpenSSL internal error, assertion failed: FATAL FIPS SELFTEST FAILURE
You can now run: /usr/local/bin/sam --version

Second issue:
/usr/local/bin/sam --version
-bash: /usr/local/bin/sam: Permission denied

The second problem with permissions can be easily resolved, but even after permissions are changed, the result is:
/usr/local/bin/sam --version
fips.c(145): OpenSSL internal error, assertion failed: FATAL FIPS SELFTEST FAILURE
Aborted (core dumped)

### Steps to reproduce:
1) Create AWS EC2 running RHEL 8.7, 64 bit.
cat /etc/redhat-release
Red Hat Enterprise Linux release 8.7 (Ootpa)
uname -p
x86_64

2) Enable FIPS mode with DEFAULT crypto policy.

3) Install Python 3.9.11 and AWS CLI 2.9.5
aws --version
aws-cli/2.9.5 Python/3.9.11 Linux/4.18.0-425.3.1.el8.x86_64 exe/x86_64.rhel.8 prompt/off

4) Follow installation instructions at
https://docs.aws.amazon.com/serverless-application-model/latest/developerguide/install-sam-cli.html

### Observed result:
fips.c(145): OpenSSL internal error, assertion failed: FATAL FIPS SELFTEST FAILURE

### Expected result:
SAM CLI, version 1.58.0

### Additional environment details (Ex: Windows, Mac, Amazon Linux etc)

1. OS: RHEL 8.7
2. `sam --version`: No output available because FIPS Self Test fails
3. AWS region: US-Gov-West

```
# Paste the output of `sam --info` here
Not output available
```

`Add --debug flag to command you are running`
Unavailable

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.