-
Notifications
You must be signed in to change notification settings - Fork 95
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
RPM Missing Digests #1168
Comments
Hello, this is affecting us on RHEL 9 in FIPS mode as well. Is there any update on when this might be fixed? |
I have opened a ticket with Nagios support about this but was just pointed back here. When will this be assigned and worked on? |
Information related to the required change can be found here: https://fedoraproject.org/wiki/RPM_file_format_changes_to_support_SHA-256 The issue is related to MD5/SHA1 being used for signatures/digest which are no longer allowed in modern FIPS restrictions. The solution is to move to using SHA-256 for these when building the RPM package. |
It looks like updating the .rpmmacros file in the build environment before building might also be a way to handle this. Possibly both should be done. Using SHA256 should allow RHEL 7, 8, and 9 to work according to what I have read.
|
Sorry for the delay in response. I will try to get this worked out for NCPA 3.2.0. |
Thanks! I appreciate the update. Let me know if you need someone to test. |
In the meantime, you can either
or if you only want to install through the Nagios repo:
|
We are unable to install NCPA 3.1.0-1 on RHEL systems running in FIPS mode. I believe the file digests are missing from the published RPMs. The yum/rpm transaction throws a
package ncpa-3.1.0-1.x86_64 does not verify: no digest
error.OS: RHEL 9.2 x86_64
The text was updated successfully, but these errors were encountered: