Comment 6 for bug 1962600

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to devstack (stable/wallaby)

Reviewed: https://review.opendev.org/c/openstack/devstack/+/848365
Committed: https://opendev.org/openstack/devstack/commit/c6604eb6b0700c4f8ba5b461691003593f1e5353
Submitter: "Zuul (22348)"
Branch: stable/wallaby

commit c6604eb6b0700c4f8ba5b461691003593f1e5353
Author: Michael Johnson <email address hidden>
Date: Mon Feb 28 18:42:34 2022 +0000

    Fix tls-proxy on newer versions of openssl

    Newer versions of openssl (CentOS9Stream for example) do not like using sha1.
    Devstack will fail on these systems[1] with the following error:
    801B93DCE77F0000:error:03000098:digital envelope routines:do_sigver_init:invalid digest:crypto/evp/m_sigver.c:333:
    This patch updates the tls-proxy code in devstack to use sha256 instead of sha1 which allows devstack to complete when tls-proxy is enabled.

    [1] https://zuul.opendev.org/t/openstack/build/1d90b22a39c74e24a8390861b3c5f957/log/job-output.txt#5535

    Closes-Bug: #1962600

    Change-Id: I71e1371affe32f070167037b0109a489d196bd31
    (cherry picked from commit 35bc600da17c7342345fa9c4d0b8078a8388fad1)