Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Try to improve error message when OpenSSL/FIPS can't access configuration file. #11628

Open
lukebakken opened this issue Jul 7, 2024 Discussed in #11611 · 0 comments
Open
Assignees

Comments

@lukebakken
Copy link
Collaborator

Discussed in #11611

Originally posted by reuvenstr July 3, 2024

Describe the bug

Hi,
After enabling FIPS mode on Ubuntu 22.04 it fails to start rabbit-server (3.12.12-1) with erlang (1:26.2.1-1)

{application_start_failure,credentials_obfuscation,{{shutdown,{failed_to_start_child,credentials_obfuscaton_svc,{low_entropy,[{crypto,strong_rand_bytes,1,[{file,\"crypto.erl\"},{line,1155}]},{credentials_obfuscation_svc,check,3,[{file,\"src/credentials_obfuscation_svc.erl\"},{line,197}]},{credentials_obfuscation_svc,init_state,0,[{file,\"src/credentials_obfuscation_svc.erl\"},{line,169}]},{gen_server,init_it,2,[{file,\"gen_server.erl\"},{line,980}]},{gen_server,init_it,6,[{file,\"gen_server.erl\"},{line,935}]},{proc_lib,init_p_do_apply,3,[{file,\"proc_lib.erl\"},{line,241}]}]}}},{credentials_obfuscation_app,start,[normal,[]]}}}

Crash dump is being written to: erl_crash.dump...done

Is there any solution without upgrading rabbitmq/erlang versions?
Thanks for your time 😄

Reproduction steps

  1. Install ubuntu 22.04, rabbitmq-server. Check everything is fine
  2. Enable FIPS mode and restart server
  3. rabbitmq server is failing to start
    ...

Expected behavior

rabbitmq server is working fine on ubuntu 22.04 with FIPS mode

Additional context

Any additional information will be provided upon request

@lukebakken lukebakken self-assigned this Jul 7, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant