Thanks Kaushal. I should have known to mention I was using FIPS from the start. Its interesting to see what enabling this breaks. Are the bug reports publicly viewable? I’d like to view the progress.
Personally Id rather see it as a feature request to give the user the option to disable certain algorithms, or tell gluster it’s a fips environment so it automatically does. -Matt From: Kaushal M [mailto:kshlms...@gmail.com] Sent: Tuesday, April 29, 2014 10:21 PM To: Justin Clift Cc: Matthew Rinella; Gluster Users; Niels de Vos Subject: Re: [Gluster-users] volume start causes glusterd to core dump in 3.5.0 Just tested this. It is the use of MD5 in FIPS mode which is causing the crash. I'll open a bug so that this can be tracked. ~kaushal On Wed, Apr 30, 2014 at 10:01 AM, Kaushal M <kshlms...@gmail.com<mailto:kshlms...@gmail.com>> wrote: I know about FIPS only by name and I'm not familiar with it. A simple google search reveals that MD5 is not FIPS compliant and cannot be used in FIPS enabled mode. Can someone confirm this? ~kaushal On Wed, Apr 30, 2014 at 5:25 AM, Justin Clift <jus...@gluster.org<mailto:jus...@gluster.org>> wrote: On 29/04/2014, at 10:54 PM, Matthew Rinella wrote: > I have this result: > > openssl-1.0.1e-16.el6_5.7.x86_64 Hmmm, that's the same version as a host here that's working. > So Im going to admit I also have FIPS mode enabled on my hosts, which is > necessary, unfortunately. This causes a huge problem with puppet because of > the crypto algorithms allowed/disallowed. Im wondering if this is going to > be an issue with gluster as well. Personally, I'm not sure. This *might* be the case atm. This sounds like something the product guys (Red Hat Storage) would be interested in, since playing well with FIPS mode may be needed for some financial institution/government type customers. Niels/Kaushal, any ideas? + Justin -- Open Source and Standards @ Red Hat twitter.com/realjustinclift<http://twitter.com/realjustinclift>
_______________________________________________ Gluster-users mailing list Gluster-users@gluster.org http://supercolony.gluster.org/mailman/listinfo/gluster-users
