Defect #43572
closed
OpenSSL digest initialization error on accessing Activity
0%
Description
I've recently migrated a database/install from Redmine 3.1 -> Redmine 6.1 (and RHEL 6.6 to RHEL 9 in a podman image). Everything seems to be working, with the exception of the Activity view. Every time (for all projects), it throws an internal server error. The logs seem to indicate it's an issue with the OpenSSL Digest initialization, but I haven't been able to figure out exactly what's failing. I've tried adding the legacy provider for the SSL configuration, but that doesn't seem to affect it. I also tried running the redmine:update_digests rake job, no luck there either.
Trace:
I, [2025-12-09T14:36:25.530550 #22465] INFO -- : [d777ae79-7a3b-4326-a21f-3185be462982] Started GET "/redmine/projects/human-factors/activity" for 10.134.199.19 at 2025-12-09 14:36:25 +0000
I, [2025-12-09T14:36:25.531348 #22465] INFO -- : [d777ae79-7a3b-4326-a21f-3185be462982] Processing by ActivitiesController#index as HTML
I, [2025-12-09T14:36:25.531395 #22465] INFO -- : [d777ae79-7a3b-4326-a21f-3185be462982] Parameters: {"id"=>"human-factors"}
I, [2025-12-09T14:36:25.537589 #22465] INFO -- : [d777ae79-7a3b-4326-a21f-3185be462982] Current user: cgsexton (id=3)
I, [2025-12-09T14:36:25.556962 #22465] INFO -- : [d777ae79-7a3b-4326-a21f-3185be462982] Completed 500 Internal Server Error in 25ms (ActiveRecord: 11.3ms (20 queries, 1 cached) | GC: 0.4ms)
F, [2025-12-09T14:36:25.557603 #22465] FATAL -- : [d777ae79-7a3b-4326-a21f-3185be462982]
[d777ae79-7a3b-4326-a21f-3185be462982] OpenSSL::Digest::DigestError (Digest initialization failed: initialization error):
[d777ae79-7a3b-4326-a21f-3185be462982]
[d777ae79-7a3b-4326-a21f-3185be462982] app/controllers/activities_controller.rb:66:in `index'
[d777ae79-7a3b-4326-a21f-3185be462982] lib/redmine/sudo_mode.rb:78:in `sudo_mode'
Environment:
Redmine version 6.1.0.stable
Ruby version 3.3.8-p144 (2025-04-09) [x86_64-linux]
Rails version 7.2.2.2
Environment production
Database adapter Mysql2
Mailer queue ActiveJob::QueueAdapters::AsyncAdapter
Mailer delivery smtp
Redmine settings:
Redmine theme Classic
SCM:
Git 2.47.3
Filesystem
Redmine plugins:
no plugin installed
MySQL Version: 8.4
Updated by Chris Sexton 1 day ago
After more code annotation and stack traces, this seems tied to FIPS mode limitations. The actionpack library (along with other ruby gems) are hard coding MD5 digests (one example is in actionpack-7.2.2.2/lib/action_controller/metal/http_authentication.rb). This ticket can likely be closed, since it seems to be a FIPS limitation in the libraries utilized by Redmine.
Updated by Go MAEDA about 8 hours ago
- Status changed from New to Closed
- Resolution set to Invalid
Thank you for your feedback. I am closing this issue.