Uploaded image for project: 'Satellite'
  1. Satellite
  2. SAT-36441

[RFE] - Support key-algorithm in omshell

XMLWordPrintable

    • None
    • None
    • None
    • None

      Description of problem:
      ----------------------

      During the setup of the external DHCP service, the OMAPI service is configured to use the HMAC-MD5 algorithm, which is not allowed in FIPS.

      Version-Release number of selected component (if applicable):
      ------------------------------------------------------------

      Red Hat Capsule 6.11 on RHEL-8

      Actual result:
      -------------

      The OMAPI service is configured to use insecure HMAC-MD5 algorithm by default which is not allowed in FIPS.

      Expected result:
      ---------------

      The OMAPI service should allow to select a different algorithm while configuring FIPS.

      Additional info:
      ---------------

      • The customer has already provided patches to fix the issue in Comments-7/8.
      • Ekohl has already filed a PR linked down below for the issue -

      https://github.com/theforeman/smart-proxy/pull/871

              ekohlvan@redhat.com Ewoud Kohl van Wijngaarden
              rhn-support-ajambhul Anand Jambhulkar
              Votes:
              2 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated:
                Resolved: