Skip to content

15.5.0 upgrade on CentOS 8 Stream in FIPS mode fails

Summary

Customer reported (internal link) when upgrading on CentOS 8 Stream from 15.4.3 to 15.5.0 an error occurs during reconfigure.

error is 78 /opt/gitlab/embedded/lib/ruby/gems/2.7.0/gems/chef-config-17.10.0/lib/chef-config/config.rb:1284:in fips_mode=': This version of OpenSSL does not support FIPS mode (OpenSSL::OpenSSLError) 79

Rollback proceeded fine.

Steps to reproduce

  1. Have CentOS 8 Stream FIPS install of 15.4.3
  2. Update RPM package to 15.5.0
  3. reconfigure fails

What is the current bug behavior?

reconfigure fails with ``fips_mode=': This version of OpenSSL does not support FIPS mode (OpenSSL::OpenSSLError)`

What is the expected correct behavior?

Reconfigure to succeed

Relevant logs

Relevant logs 
77 Reconfigure GitLab to apply migrations
78 /opt/gitlab/embedded/lib/ruby/gems/2.7.0/gems/chef-config-17.10.0/lib/chef-config/config.rb:1284:in fips_mode=': This version of OpenSSL does not support FIPS mode (OpenSSL::OpenSSLError) 79 	from /opt/gitlab/embedded/lib/ruby/gems/2.7.0/gems/chef-config-17.10.0/lib/chef-config/config.rb:1284:in enable_fips_mode'
80 	from /opt/gitlab/embedded/lib/ruby/gems/2.7.0/gems/chef-config-17.10.0/lib/chef-config/config.rb:734:in init_openssl' 81 	from /opt/gitlab/embedded/lib/ruby/gems/2.7.0/gems/chef-17.10.0/lib/chef/application.rb:104:in configure_chef'
82 	from /opt/gitlab/embedded/lib/ruby/gems/2.7.0/gems/chef-17.10.0/lib/chef/application.rb:55:in reconfigure' 83 	from /opt/gitlab/embedded/lib/ruby/gems/2.7.0/gems/chef-17.10.0/lib/chef/application/client.rb:76:in reconfigure'
84 	from /opt/gitlab/embedded/lib/ruby/gems/2.7.0/gems/chef-17.10.0/lib/chef/application.rb:64:in run' 85 	from /opt/gitlab/embedded/lib/ruby/gems/2.7.0/gems/chef-bin-17.10.0/bin/cinc-client:25:in <top (required)>'
86 	from /opt/gitlab/embedded/bin/cinc-client:23:in load' 87 	from /opt/gitlab/embedded/bin/cinc-client:23:in '
88 ===
89 There was an error running gitlab-ctl reconfigure. Please check the output above for more
90 details.
91 ===
92 warning: %posttrans(gitlab-ee-15.5.0-ee.0.el8.x86_64) scriptlet failed, exit status 1

Details of package version

Provide the package version installation details
Edited by Jessie Lee