saltstack / saltstack/salt

[Bug]: FATAL FIPS FAILURE while applying highstates on salit-minion 3006 with libopenssl10

Open
#68,471 3 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

bug needs-triage
Dominant language
Python
Stars
15.7k
Forks
5.6k
Avg merge
2d 44m
Merged PRs (30d)
80

Description

What happened?

While applying states to 3006.x salt-minions with installed libopenssl10 face the following error:

localhost# venv-salt-call state.highstate
fips.c(468): OpenSSL internal error, assertion failed: FATAL FIPS SELFTEST FAILURE
Aborted (core dumped)
Type of salt install

Official rpm

Major version

3006.x

What supported OS are you seeing the problem on? Can select multiple. (If bug appears on an unsupported OS, please open a GitHub Discussion instead)

opensuse-leap-15.5

salt --versions-report output
Salt Version:
          Salt: 3006.0

Python Version:
        Python: 3.10.10 (main, Mar 29 2023, 11:44:11) [GCC]

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Reproduce the failure with venv-salt-call state.highstate on openSUSE Leap 15.5 using Salt 3006.0, libopenssl10, and FIPS enabled. Trace the FIPS self-test failure through Salt's highstate entry point and OpenSSL interaction; done means identifying the compatibility cause and verifying that highstates no longer abort.

Written by the indexing model from the issue text.

Assessment

Tech stack
python
Domain
devops, operating-systems, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Quiet
Clarity
Needs clarification
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.