Opened 8 years ago

Last modified 6 years ago

#12854 closed defect

Clicking on the Admin Users link generates "error:060800A3:digital envelope routines:EVP_DigestInit_ex:disabled for fips" — at Version 2

Reported by: adrya.stembridge@… Owned by: Steffen Hoffmann
Priority: high Component: AccountManagerPlugin
Severity: normal Keywords: fips, md5, sha1
Cc: Trac Release:

Description (last modified by Ryan J Ollos)

I recently upgraded our server from EL6 to EL7, however the major change is that this system is now running in FIPS mode. When systems are running in FIPS mode, MD5 hashing is not available.

Trac works OK, except when I go to Admin - Users (https://example.com/trac/admin/accounts/users). The following error appears instead of the Users page:

Trac detected an internal error: 
"ValueError: error:060800A3:digital envelope routines:EVP_DigestInit_ex:disabled for fips"

Trac maintainers are addressing a similar error with notification.py by adding a configuration item allowing admins to select MD5 (default) or SHA1 for the digest algorithm. Previously, MD5 was hard coded into the python scripts.

trac:#12562

Python Traceback

Most recent call last:
    File "/usr/lib/python2.7/site-packages/trac/web/main.py", line 554, in _dispatch_request
    File "/usr/lib/python2.7/site-packages/trac/web/main.py", line 247, in dispatch
    File "/usr/lib/python2.7/site-packages/trac/admin/web_ui.py", line 119, in process_request
    File "/usr/lib/python2.7/site-packages/acct_mgr/admin.py", line 204, in render_admin_panel
    File "/usr/lib/python2.7/site-packages/acct_mgr/admin.py", line 449, in _do_users
    File "/usr/lib/python2.7/site-packages/acct_mgr/admin.py", line 73, in fetch_user_data
    File "/usr/lib/python2.7/site-packages/acct_mgr/model.py", line 140, in get_user_attribute 

System Information:

Trac 	1.0.10
Babel 	0.9.6
Genshi 	0.7 (with speedups)
mod_wsgi 	3.4 (WSGIProcessGroup WSGIApplicationGroup %{GLOBAL})
pysqlite 	2.6.0
Python 	2.7.5 (default, Aug 9 2016, 05:27:46) [GCC 4.8.5 20150623 (Red Hat 4.8.5-4)]
setuptools 	0.9.8
SQLite 	3.7.17
jQuery	1.7.2
jQuery UI	1.8.21
jQuery Timepicker	1.0.1

Enabled Plugins:
CKIntegration 	1.1dev 	/usr/lib/python2.7/site-packages
TracAccountManager 	0.4.4 	/usr/lib/python2.7/site-packages

Change History (2)

comment:1 Changed 8 years ago by adrya.stembridge@…

Apologies for the formatting in the submitted bug report. I am unable to edit.

comment:2 Changed 8 years ago by Ryan J Ollos

Description: modified (diff)
Note: See TracTickets for help on using tickets.