Project

General

Profile

MD5 Checksum and FIPS Redhat Module conflict

Added by Tony Lynch over 6 years ago

All,

We run project that is required to compliant with the FIPS 140-2 publication. We run RHEL 7 servers, and we have the dracut-fips packages installed. When we enable them, Redmine fails completely because (at least our assumption is) the MD5 checksum used for verifying the file integrity is conflicting with FIPS because FIPS will not allow it to run.

Are there any options to make Redmine use the FIPS encryption algorithms vs the MD5? Or can we comment out the MD5 checksum for uploaded files? This system is used on a completely standalone network.

Any ideas would be greatly appreciated.