-
Bug
-
Resolution: Unresolved
-
Undefined
-
None
-
rhel-10.2
-
None
-
Yes
-
None
-
rhel-security-special-projects
-
None
-
False
-
False
-
-
None
-
None
-
None
-
None
-
Unspecified
-
Unspecified
-
Unspecified
-
-
All
-
None
What were you trying to do that didn't work?
Add agent from RHEL-10.2-Nightly to a verifier from an older release
2025-11-23 14:21:18.340 - keylime.tenant - ERROR - TPM Quote from Agent d432fbb3-d2f1-4a97-9ef7-75bd81c33333 (10.31.47.221:9002) is using an unaccepted encryption algorithm: rsa2048
I believe that from compatibility reasons rsa2048 should be advertized as 'rsa' only. That is what I can see on older versions.
What is the impact of this issue to you?
keylime agent cannot be added
Please provide the package NVR for which the bug is seen:
keylime-agent-rust-0.2.7-4.el10.x86_64
How reproducible is this bug?:
always
Steps to reproduce
- configure registrar, verifier on RHEL-10.1
- start attestation for agent running on RHEL-10.2
- cannot add agent
Expected results
attestation works
Actual results
error