indygreg / indygreg/PyOxidizer

Cannot pass `-fips` parameter to candle.exe

Open
#686 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Rust
Stars
6.2k
Forks
256
PR merge metrics
No merged PRs in 30d

Description

On a Window 10 system that is FIPS enabled, I cannot use `pyoxidizer` to create the MSI file.

Steps to reproduce:

1. create new Python virtual environment
2. Install `pyoxidizer` into virtual environment
3. create a new `pyoxidizer` project with `pyoxidizer init-config-file test`
4. Switch to the `test` folder
5. Try to build the MSI with `pyoxidizer build msi-installer`
6. Fails with an error generated by `candle.exe` that the `-fips` parameter must be passed, or the true property should be added to the .wixproj file.

How can I get `pyoxidizer` to set/pass this parameter? Note, these steps succeed on a system that is not FIPS enabled, but our environment requires FIPS.

Contributor guide

No contributing guide indexed for this repository

Research direction

Start with the `pyoxidizer build msi-installer` entry point and trace how it invokes `candle.exe`. Reproduce the failure on a FIPS-enabled Windows 10 system, then verify that the MSI build succeeds while satisfying the required FIPS setting.

Written by the indexing model from the issue text.

Assessment

Tech stack
rust
Domain
build-system
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.