redhat-developer / redhat-developer/vscode-java

Uncaught Error on FIPS-enabled OS: error:060800C8:digital envelope routines:EVP_DigestInit_ex:disabled for FIPS

Open
#3,130 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
TypeScript
Stars
2.3k
Forks
546
Avg merge
20h 1m
Merged PRs (30d)
11

Description

I am trying to install and run vscode-java in OpenShift Devspaces (Eclipse Che) workspace on a FIPS-enabled OpenShift cluster.

The plugin appears to install correctly. However, I am seeing the following uncaught error:

error:060800C8:digital envelope routines:EVP_DigestInit_ex:disabled for FIPS

Based on previous experience with similar errors, I'd guess that there is a use of md5 (or similar cryptographic algorithm used by openssl that is disabled by OS in FIPS-mode), either in the plugin itself or one of its nodejs dependencies

Environment
  • OpenShift 4.12.9 - (FIPS-mode Enabled)
  • Red Hat OpenShift Dev Spaces - 3.6.0+0.1685320856.p
  • Operating System: Red Hat Enterprise Linux release 8.7 (Ootpa)
  • JDK version: openjdk 11.0.19 2023-04-18 LTS
  • Visual Studio Code version: Red Hat OpenShift Dev Spaces with Microsoft Visual Studio Code - v1.78.0
  • Java extension version: Language Support for Java(TM) by Red Hat - v1.17.0
Steps To Reproduce
  1. Install vscode-java on a VSCode instance running on FIPS-enabled RHEL8 or in DevSpaces on a FIPS-enabled OpenShift cluster
  2. Review any Uncaught Errors reported by the extension in VSCode
Current Result

1 Uncaught Error on the extension:
error:060800C8:digital envelope routines:EVP_DigestInit_ex:disabled for FIPS

image

Expected Result

No Uncaught Errors

Additional Information

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Reproduce the uncaught error by installing vscode-java in VS Code or OpenShift Dev Spaces on FIPS-enabled RHEL 8 or OpenShift. Inspect the extension and its Node.js dependencies for the disabled digest operation; done means the extension runs without the reported FIPS error.

Written by the indexing model from the issue text.

Assessment

Tech stack
node.js, typescript
Domain
devtools, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
30/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.