[tahoe-lafs-trac-stream] [Tahoe-LAFS] #2400: OpenSSL.crypto.Error (unknown message digest algorithm) when starting a node, using OpenSSL 1.0.1k-fips

[Tahoe-LAFS]

#2400: OpenSSL.crypto.Error (unknown message digest algorithm) when starting a
node, using OpenSSL 1.0.1k-fips
-------------------------+-------------------------------------------------
     Reporter:  daira    |      Owner:  daira
         Type:  defect   |     Status:  new
     Priority:  major    |  Milestone:  undecided
    Component:  code-    |    Version:  1.10.0
  network                |   Keywords:  packaging fedora openssl fips
   Resolution:           |  tahoe-start
Launchpad Bug:           |
-------------------------+-------------------------------------------------

Comment (by daira):

 It's quite unfortunate that the error message doesn't specify *which*
 message digest algorithm is unknown. I thought that the FIPS build might
 not include SHA-1, but Gabe posted (on the LeastAuthority Zendesk ticket)
 an algorithm list that does include that:
 {{{
 Here is the list of message digest and cipher algorithms available, looks
 like SHA1 is supported:

  gabeos  ~  openssl list-message-digest-algorithms
 DSA
 DSA-SHA
 DSA-SHA1 => DSA
 DSA-SHA1-old => DSA-SHA1
 DSS1 => DSA-SHA1
 MD4
 MD5
 RIPEMD160
 RSA-MD4 => MD4
 RSA-MD5 => MD5
 RSA-RIPEMD160 => RIPEMD160
 RSA-SHA => SHA
 RSA-SHA1 => SHA1
 RSA-SHA1-2 => RSA-SHA1
 RSA-SHA224 => SHA224
 RSA-SHA256 => SHA256
 RSA-SHA384 => SHA384
 RSA-SHA512 => SHA512
 SHA
 SHA1
 SHA224
 SHA256
 SHA384
 SHA512
 DSA
 DSA-SHA
 dsaWithSHA1 => DSA
 dss1 => DSA-SHA1
 ecdsa-with-SHA1
 MD4
 md4WithRSAEncryption => MD4
 MD5
 md5WithRSAEncryption => MD5
 ripemd => RIPEMD160
 RIPEMD160
 ripemd160WithRSA => RIPEMD160
 rmd160 => RIPEMD160
 SHA
 SHA1
 sha1WithRSAEncryption => SHA1
 SHA224
 sha224WithRSAEncryption => SHA224
 SHA256
 sha256WithRSAEncryption => SHA256
 SHA384
 sha384WithRSAEncryption => SHA384
 SHA512
 sha512WithRSAEncryption => SHA512
 shaWithRSAEncryption => SHA
 ssl2-md5 => MD5
 ssl3-md5 => MD5
 ssl3-sha1 => SHA1
 whirlpool
  gabeos  ~  openssl list-cipher-algorithms
 AES-128-CBC
 AES-128-CBC-HMAC-SHA1
 AES-128-CFB
 AES-128-CFB1
 AES-128-CFB8
 AES-128-CTR
 AES-128-ECB
 AES-128-OFB
 AES-128-XTS
 AES-192-CBC
 AES-192-CFB
 AES-192-CFB1
 AES-192-CFB8
 AES-192-CTR
 AES-192-ECB
 AES-192-OFB
 AES-256-CBC
 AES-256-CBC-HMAC-SHA1
 AES-256-CFB
 AES-256-CFB1
 AES-256-CFB8
 AES-256-CTR
 AES-256-ECB
 AES-256-OFB
 AES-256-XTS
 AES128 => AES-128-CBC
 AES192 => AES-192-CBC
 AES256 => AES-256-CBC
 BF => BF-CBC
 BF-CBC
 BF-CFB
 BF-ECB
 BF-OFB
 CAMELLIA-128-CBC
 CAMELLIA-128-CFB
 CAMELLIA-128-CFB1
 CAMELLIA-128-CFB8
 CAMELLIA-128-ECB
 CAMELLIA-128-OFB
 CAMELLIA-192-CBC
 CAMELLIA-192-CFB
 CAMELLIA-192-CFB1
 CAMELLIA-192-CFB8
 CAMELLIA-192-ECB
 CAMELLIA-192-OFB
 CAMELLIA-256-CBC
 CAMELLIA-256-CFB
 CAMELLIA-256-CFB1
 CAMELLIA-256-CFB8
 CAMELLIA-256-ECB
 CAMELLIA-256-OFB
 CAMELLIA128 => CAMELLIA-128-CBC
 CAMELLIA192 => CAMELLIA-192-CBC
 CAMELLIA256 => CAMELLIA-256-CBC
 CAST => CAST5-CBC
 CAST-cbc => CAST5-CBC
 CAST5-CBC
 CAST5-CFB
 CAST5-ECB
 CAST5-OFB
 DES => DES-CBC
 DES-CBC
 DES-CFB
 DES-CFB1
 DES-CFB8
 DES-ECB
 DES-EDE
 DES-EDE-CBC
 DES-EDE-CFB
 DES-EDE-OFB
 DES-EDE3
 DES-EDE3-CBC
 DES-EDE3-CFB
 DES-EDE3-CFB1
 DES-EDE3-CFB8
 DES-EDE3-OFB
 DES-OFB
 DES3 => DES-EDE3-CBC
 DESX => DESX-CBC
 DESX-CBC
 IDEA => IDEA-CBC
 IDEA-CBC
 IDEA-CFB
 IDEA-ECB
 IDEA-OFB
 RC2 => RC2-CBC
 RC2-40-CBC
 RC2-64-CBC
 RC2-CBC
 RC2-CFB
 RC2-ECB
 RC2-OFB
 RC4
 RC4-40
 RC4-HMAC-MD5
 SEED => SEED-CBC
 SEED-CBC
 SEED-CFB
 SEED-ECB
 SEED-OFB
 AES-128-CBC
 AES-128-CBC-HMAC-SHA1
 AES-128-CFB
 AES-128-CFB1
 AES-128-CFB8
 AES-128-CTR
 AES-128-ECB
 id-aes128-GCM
 AES-128-OFB
 AES-128-XTS
 AES-192-CBC
 AES-192-CFB
 AES-192-CFB1
 AES-192-CFB8
 AES-192-CTR
 AES-192-ECB
 id-aes192-GCM
 AES-192-OFB
 AES-256-CBC
 AES-256-CBC-HMAC-SHA1
 AES-256-CFB
 AES-256-CFB1
 AES-256-CFB8
 AES-256-CTR
 AES-256-ECB
 id-aes256-GCM
 AES-256-OFB
 AES-256-XTS
 aes128 => AES-128-CBC
 aes192 => AES-192-CBC
 aes256 => AES-256-CBC
 bf => BF-CBC
 BF-CBC
 BF-CFB
 BF-ECB
 BF-OFB
 blowfish => BF-CBC
 CAMELLIA-128-CBC
 CAMELLIA-128-CFB
 CAMELLIA-128-CFB1
 CAMELLIA-128-CFB8
 CAMELLIA-128-ECB
 CAMELLIA-128-OFB
 CAMELLIA-192-CBC
 CAMELLIA-192-CFB
 CAMELLIA-192-CFB1
 CAMELLIA-192-CFB8
 CAMELLIA-192-ECB
 CAMELLIA-192-OFB
 CAMELLIA-256-CBC
 CAMELLIA-256-CFB
 CAMELLIA-256-CFB1
 CAMELLIA-256-CFB8
 CAMELLIA-256-ECB
 CAMELLIA-256-OFB
 camellia128 => CAMELLIA-128-CBC
 camellia192 => CAMELLIA-192-CBC
 camellia256 => CAMELLIA-256-CBC
 cast => CAST5-CBC
 cast-cbc => CAST5-CBC
 CAST5-CBC
 CAST5-CFB
 CAST5-ECB
 CAST5-OFB
 des => DES-CBC
 DES-CBC
 DES-CFB
 DES-CFB1
 DES-CFB8
 DES-ECB
 DES-EDE
 DES-EDE-CBC
 DES-EDE-CFB
 DES-EDE-OFB
 DES-EDE3
 DES-EDE3-CBC
 DES-EDE3-CFB
 DES-EDE3-CFB1
 DES-EDE3-CFB8
 DES-EDE3-OFB
 DES-OFB
 des3 => DES-EDE3-CBC
 desx => DESX-CBC
 DESX-CBC
 id-aes128-GCM
 id-aes128-wrap
 id-aes128-wrap-pad
 id-aes192-GCM
 id-aes192-wrap
 id-aes192-wrap-pad
 id-aes256-GCM
 id-aes256-wrap
 id-aes256-wrap-pad
 id-smime-alg-CMS3DESwrap
 idea => IDEA-CBC
 IDEA-CBC
 IDEA-CFB
 IDEA-ECB
 IDEA-OFB
 rc2 => RC2-CBC
 RC2-40-CBC
 RC2-64-CBC
 RC2-CBC
 RC2-CFB
 RC2-ECB
 RC2-OFB
 RC4
 RC4-40
 RC4-HMAC-MD5
 seed => SEED-CBC
 SEED-CBC
 SEED-CFB
 SEED-ECB
 SEED-OFB
 }}}

--
Ticket URL: <https://tahoe-lafs.org/trac/tahoe-lafs/ticket/2400#comment:1>
Tahoe-LAFS <https://Tahoe-LAFS.org>
secure decentralized storage