{"action":"reopened","issue":{"url":"https://api.github.com/repos/chef/chef/issues/8009","repository_url":"https://api.github.com/repos/chef/chef","labels_url":"https://api.github.com/repos/chef/chef/issues/8009/labels{/name}","comments_url":"https://api.github.com/repos/chef/chef/issues/8009/comments","events_url":"https://api.github.com/repos/chef/chef/issues/8009/events","html_url":"https://github.com/chef/chef/issues/8009","id":386976079,"node_id":"MDU6SXNzdWUzODY5NzYwNzk=","number":8009,"title":"Chef not honouring FIPS requirement","user":{"login":"frezbo","id":18496730,"node_id":"MDQ6VXNlcjE4NDk2NzMw","avatar_url":"https://avatars0.githubusercontent.com/u/18496730?v=4","gravatar_id":"","url":"https://api.github.com/users/frezbo","html_url":"https://github.com/frezbo","followers_url":"https://api.github.com/users/frezbo/followers","following_url":"https://api.github.com/users/frezbo/following{/other_user}","gists_url":"https://api.github.com/users/frezbo/gists{/gist_id}","starred_url":"https://api.github.com/users/frezbo/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/frezbo/subscriptions","organizations_url":"https://api.github.com/users/frezbo/orgs","repos_url":"https://api.github.com/users/frezbo/repos","events_url":"https://api.github.com/users/frezbo/events{/privacy}","received_events_url":"https://api.github.com/users/frezbo/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":7,"created_at":"2018-12-03T19:46:43Z","updated_at":"2018-12-08T03:53:07Z","closed_at":null,"author_association":"NONE","body":"\r\n## Description\r\n\r\nhttps://github.com/chef/chef/blob/master/chef-config/lib/chef-config/config.rb#L1132 is not a proper FIPS fix. Ruby compiled with OpenSSL FIPS and `OpenSSL.fips_mode` already being `true` would fail a call to `OpenSSL::Digest::MD5.new`. Eg:\r\n\r\n```\r\n[ec2-user@ip-10-17-142-203 berkshelf]$ irb\r\n2.4.4 :001 > require 'digest'\r\n => true \r\n2.4.4 :002 > Digest::MD5.new\r\nmd5_dgst.c(82): OpenSSL internal error, assertion failed: Digest MD5 forbidden in FIPS mode!\r\nAborted\r\n```\r\n\r\n## Chef Version\r\n\r\n```\r\n[ec2-user@ip-10-17-142-203 ~]$ chef -v\r\nChef Development Kit Version: 3.3.23\r\nchef-client version: 14.5.33\r\ndelivery version: master (6862f27aba89109a9630f0b6c6798efec56b4efe)\r\nberks version: 7.0.6\r\nkitchen version: 1.23.2\r\ninspec version: 2.2.112\r\n[ec2-user@ip-10-17-142-203 ~]$ \r\n```\r\n\r\n## Platform Version\r\n\r\n```\r\n[ec2-user@ip-10-17-142-203 ~]$ cat /etc/*-release\r\nNAME=\"Red Hat Enterprise Linux Server\"\r\nVERSION=\"7.6 (Maipo)\"\r\nID=\"rhel\"\r\nID_LIKE=\"fedora\"\r\nVARIANT=\"Server\"\r\nVARIANT_ID=\"server\"\r\nVERSION_ID=\"7.6\"\r\nPRETTY_NAME=\"Red Hat Enterprise Linux Server 7.6 (Maipo)\"\r\nANSI_COLOR=\"0;31\"\r\nCPE_NAME=\"cpe:/o:redhat:enterprise_linux:7.6:GA:server\"\r\nHOME_URL=\"https://www.redhat.com/\"\r\nBUG_REPORT_URL=\"https://bugzilla.redhat.com/\"\r\n\r\nREDHAT_BUGZILLA_PRODUCT=\"Red Hat Enterprise Linux 7\"\r\nREDHAT_BUGZILLA_PRODUCT_VERSION=7.6\r\nREDHAT_SUPPORT_PRODUCT=\"Red Hat Enterprise Linux\"\r\nREDHAT_SUPPORT_PRODUCT_VERSION=\"7.6\"\r\nRed Hat Enterprise Linux Server release 7.6 (Maipo)\r\nRed Hat Enterprise Linux Server release 7.6 (Maipo)\r\n[ec2-user@ip-10-17-142-203 ~]$ uname -a\r\nLinux ip-10-17-142-203.ec2.internal 3.10.0-957.1.3.el7.x86_64 #1 SMP Thu Nov 15 17:36:42 UTC 2018 x86_64 x86_64 x86_64 GNU/Linux\r\n[ec2-user@ip-10-17-142-203 ~]$ openssl version\r\nOpenSSL 1.0.2k-fips  26 Jan 2017\r\n```\r\n\r\n"}}
{"actor":{"display_login":"frezbo"}}