commit 89caa372884d5f0f988ba17b821df794e3d36d7e
Author: Michael Johnson <email address hidden>
Date: Mon Feb 28 18:42:34 2022 +0000
Fix tls-proxy on newer versions of openssl
Newer versions of openssl (CentOS9Stream for example) do not like using sha1.
Devstack will fail on these systems[1] with the following error:
801B93DCE77F0000:error:03000098:digital envelope routines:do_sigver_init:invalid digest:crypto/evp/m_sigver.c:333:
This patch updates the tls-proxy code in devstack to use sha256 instead of sha1 which allows devstack to complete when tls-proxy is enabled.
Reviewed: https:/ /review. opendev. org/c/openstack /devstack/ +/848364 /opendev. org/openstack/ devstack/ commit/ 89caa372884d5f0 f988ba17b821df7 94e3d36d7e
Committed: https:/
Submitter: "Zuul (22348)"
Branch: stable/xena
commit 89caa372884d5f0 f988ba17b821df7 94e3d36d7e
Author: Michael Johnson <email address hidden>
Date: Mon Feb 28 18:42:34 2022 +0000
Fix tls-proxy on newer versions of openssl
Newer versions of openssl (CentOS9Stream for example) do not like using sha1. F0000:error: 03000098: digital envelope routines: do_sigver_ init:invalid digest: crypto/ evp/m_sigver. c:333:
Devstack will fail on these systems[1] with the following error:
801B93DCE77
This patch updates the tls-proxy code in devstack to use sha256 instead of sha1 which allows devstack to complete when tls-proxy is enabled.
[1] https:/ /zuul.opendev. org/t/openstack /build/ 1d90b22a39c74e2 4a8390861b3c5f9 57/log/ job-output. txt#5535
Closes-Bug: #1962600
Change-Id: I71e1371affe32f 070167037b0109a 489d196bd31 2345fa9c4d0b807 8a8388fad1)
(cherry picked from commit 35bc600da17c734