[tahoe-lafs-trac-stream] [Tahoe-LAFS] #2400: OpenSSL.crypto.Error (unknown message digest algorithm) when starting a node, using OpenSSL 1.0.1k-fips

[Tahoe-LAFS]

#2400: OpenSSL.crypto.Error (unknown message digest algorithm) when starting a
node, using OpenSSL 1.0.1k-fips
-------------------------+-------------------------------------------------
     Reporter:  daira    |      Owner:  daira
         Type:  defect   |     Status:  new
     Priority:  major    |  Milestone:  undecided
    Component:  code-    |    Version:  1.10.0
  network                |   Keywords:  packaging fedora openssl fips
   Resolution:           |  tahoe-start error
Launchpad Bug:           |
-------------------------+-------------------------------------------------

Comment (by daira):

 It appears that foolscap, before the fix to
 [http://foolscap.lothar.com/trac/ticket/141], generates certificates that
 use RSA with MD5 as the signature algorithm. Although RSA-MD5 is listed in
 the algorithms in comment:1, it may be that OpenSSL in FIPS mode is (not
 entirely unreasonably) refusing to use it to sign certificates.

--
Ticket URL: <https://tahoe-lafs.org/trac/tahoe-lafs/ticket/2400#comment:3>
Tahoe-LAFS <https://Tahoe-LAFS.org>
secure decentralized storage