Skip to content

This issue was moved to a discussion.

You can continue the conversation there. Go to discussion →

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

OpenSSL error when trying to enable FIPS #47291

Closed
devalexqt opened this issue Mar 29, 2023 · 0 comments
Closed

OpenSSL error when trying to enable FIPS #47291

devalexqt opened this issue Mar 29, 2023 · 0 comments

Comments

@devalexqt
Copy link

Version

v20.0.0-pre

Platform

Linux server 5.15.0-67-generic #74-Ubuntu SMP Wed Feb 22 14:14:39 UTC 2023 x86_64 x86_64 x86_64 GNU/Linux

Subsystem

No response

What steps will reproduce the bug?

Follow the instruction https://github.com/nodejs/node/blob/main/BUILDING.md#building-nodejs-with-fips-compliant-openssl to build node with quic support, but then I finnaly compile and test node: ./node --enable-fips -p 'crypto.getFips(), I got error:

./node: OpenSSL error when trying to enable FIPS:
40EC6CFCCA7F0000:error:1C8000D5:Provider routines:SELF_TEST_post:missing config data:providers/fips/self_test.c:290:
``

### How often does it reproduce? Is there a required condition?

100%

### What is the expected behavior? Why is that the expected behavior?

`./node --enable-fips -p 'crypto.getFips()` must return `1` as indicated in docs: https://github.com/nodejs/node/blob/main/BUILDING.md#building-nodejs-with-fips-compliant-openssl

### What do you see instead?

` ./node --enable-fips -p 'crypto.getFips()'`

./node: OpenSSL error when trying to enable FIPS:
40EC6CFCCA7F0000:error:1C8000D5:Provider routines:SELF_TEST_post:missing config data:providers/fips/self_test.c:290:


### Additional information

` ldd ./node`
    linux-vdso.so.1 (0x00007fff51b62000)
    libcrypto.so.81.3 => /path/to/install/dir/lib64/libcrypto.so.81.3 (0x00007fc4fa580000)
    libssl.so.81.3 => /path/to/install/dir/lib64/libssl.so.81.3 (0x00007fc4fa4ce000)
    libstdc++.so.6 => /lib/x86_64-linux-gnu/libstdc++.so.6 (0x00007fc4fa2a4000)
    libm.so.6 => /lib/x86_64-linux-gnu/libm.so.6 (0x00007fc4fa1bd000)
    libgcc_s.so.1 => /lib/x86_64-linux-gnu/libgcc_s.so.1 (0x00007fc4fa19d000)
    libc.so.6 => /lib/x86_64-linux-gnu/libc.so.6 (0x00007fc4f9f75000)
    /lib64/ld-linux-x86-64.so.2 (0x00007fc4ff6c0000)

`./node -p process.versions.openssl`

3.0.8+quic


`./node -p 'process.config.variables.openssl_is_fips'`

true

@nodejs nodejs locked and limited conversation to collaborators Mar 29, 2023
@bnoordhuis bnoordhuis converted this issue into discussion #47293 Mar 29, 2023

This issue was moved to a discussion.

You can continue the conversation there. Go to discussion →

Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant