[Gluster-users] volume start causes glusterd to core dump in 3.5.0

[Matthew Rinella]

Thanks Kaushal.  I should have known to mention I was using FIPS from the start.   Its interesting to see what enabling this breaks.
Are the bug reports publicly viewable?  I’d like to view the progress.

Personally Id rather see it as a feature request to give the user the option to disable certain algorithms, or tell gluster it’s a fips environment so it automatically does.

-Matt

From: Kaushal M [mailto:kshlmster at gmail.com]
Sent: Tuesday, April 29, 2014 10:21 PM
To: Justin Clift
Cc: Matthew Rinella; Gluster Users; Niels de Vos
Subject: Re: [Gluster-users] volume start causes glusterd to core dump in 3.5.0

Just tested this. It is the use of MD5 in FIPS mode which is causing the crash. I'll open a bug so that this can be tracked.

~kaushal

On Wed, Apr 30, 2014 at 10:01 AM, Kaushal M <kshlmster at gmail.com<mailto:kshlmster at gmail.com>> wrote:
I know about FIPS only by name and I'm not familiar with it.

A simple google search reveals that MD5 is not FIPS compliant and cannot be used in FIPS enabled mode. Can someone confirm this?

~kaushal

On Wed, Apr 30, 2014 at 5:25 AM, Justin Clift <justin at gluster.org<mailto:justin at gluster.org>> wrote:
On 29/04/2014, at 10:54 PM, Matthew Rinella wrote:
> I have this result:
>
> openssl-1.0.1e-16.el6_5.7.x86_64
Hmmm, that's the same version as a host here that's working.


> So Im going to admit I also have FIPS mode enabled on my hosts, which is necessary, unfortunately.  This causes a huge problem with puppet because of the crypto algorithms allowed/disallowed.   Im wondering if this is going to be an issue with gluster as well.
Personally, I'm not sure.  This *might* be the case atm.

This sounds like something the product guys (Red Hat Storage) would
be interested in, since playing well with FIPS mode may be needed
for some financial institution/government type customers.

Niels/Kaushal, any ideas?

+ Justin

--
Open Source and Standards @ Red Hat

twitter.com/realjustinclift<http://twitter.com/realjustinclift>


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://supercolony.gluster.org/pipermail/gluster-users/attachments/20140430/b6b72fc3/attachment.html>