[Bug]: FATAL FIPS FAILURE while applying highstates on salit-minion 3006 with libopenssl10
Open
Nobody has claimed this yet.
bug
needs-triage
- Dominant language
- Python
- Stars
- 15.7k
- Forks
- 5.6k
- Avg merge
- 2d 44m
- Merged PRs (30d)
- 80
Description
What happened?
While applying states to 3006.x salt-minions with installed libopenssl10 face the following error:
localhost# venv-salt-call state.highstate
fips.c(468): OpenSSL internal error, assertion failed: FATAL FIPS SELFTEST FAILURE
Aborted (core dumped)
Type of salt install
Official rpm
Major version
3006.x
What supported OS are you seeing the problem on? Can select multiple. (If bug appears on an unsupported OS, please open a GitHub Discussion instead)
opensuse-leap-15.5
salt --versions-report output
Salt Version:
Salt: 3006.0
Python Version:
Python: 3.10.10 (main, Mar 29 2023, 11:44:11) [GCC]
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Reproduce the failure with venv-salt-call state.highstate on openSUSE Leap 15.5 using Salt 3006.0, libopenssl10, and FIPS enabled. Trace the FIPS self-test failure through Salt's highstate entry point and OpenSSL interaction; done means identifying the compatibility cause and verifying that highstates no longer abort.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python
- Domain
- devops, operating-systems, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Quiet
- Clarity
- Needs clarification
- Newbie friendliness
- 35/100