redhat-developer / redhat-developer/vscode-java
Uncaught Error on FIPS-enabled OS: error:060800C8:digital envelope routines:EVP_DigestInit_ex:disabled for FIPS
还没有人认领这个 Issue。
- 主要语言
- TypeScript
- 星标
- 2.3k
- 派生
- 546
- 平均合并
- 20 小时 1 分钟
- 30 天内合并 PR
- 11
描述
I am trying to install and run vscode-java in OpenShift Devspaces (Eclipse Che) workspace on a FIPS-enabled OpenShift cluster.
The plugin appears to install correctly. However, I am seeing the following uncaught error:
error:060800C8:digital envelope routines:EVP_DigestInit_ex:disabled for FIPS
Based on previous experience with similar errors, I'd guess that there is a use of md5 (or similar cryptographic algorithm used by openssl that is disabled by OS in FIPS-mode), either in the plugin itself or one of its nodejs dependencies
Environment
- OpenShift 4.12.9 - (FIPS-mode Enabled)
- Red Hat OpenShift Dev Spaces - 3.6.0+0.1685320856.p
- Operating System: Red Hat Enterprise Linux release 8.7 (Ootpa)
- JDK version: openjdk 11.0.19 2023-04-18 LTS
- Visual Studio Code version: Red Hat OpenShift Dev Spaces with Microsoft Visual Studio Code - v1.78.0
- Java extension version: Language Support for Java(TM) by Red Hat - v1.17.0
Steps To Reproduce
- Install vscode-java on a VSCode instance running on FIPS-enabled RHEL8 or in DevSpaces on a FIPS-enabled OpenShift cluster
- Review any Uncaught Errors reported by the extension in VSCode
Current Result
1 Uncaught Error on the extension:
error:060800C8:digital envelope routines:EVP_DigestInit_ex:disabled for FIPS
Expected Result
No Uncaught Errors
Additional Information
贡献指南
从这里开始
- 先读完整个 Issue,再读项目的贡献指南。
- 在 Issue 下留言说明你要接手 —— 这能避免两个人做同样的事。
- Fork 仓库,在一个分支上完成修改。
- 提交 Pull Request,并在描述里引用这个 Issue 编号。
调研方向
通过在启用 FIPS 的 RHEL 8 或 OpenShift 上的 VS Code 或 OpenShift Dev Spaces 中安装 vscode-java,重现未捕获的错误。检查扩展及其 Node.js 依赖项,查找已禁用的 digest 操作;完成标准是扩展能够在不出现所报告的 FIPS 错误的情况下运行。
由索引模型根据 Issue 内容生成。
评估
- 技术栈
- node.js, typescript
- 领域
- devtools, security
- Issue 类型
- 缺陷
- 难度
- 4/5
- 预计耗时
- 3-5 天
- 活跃度
- 停滞
- 描述清晰度
- 需要澄清
- 新手友好度
- 30/100