action #63526
closed[sle][security][sle15sp2][FIPS] test fails in openssl_fips_cipher about WARNING : deprecated key derivation used. (-pbkdf2 missing)
0%
Description
Observation¶
openQA test in scenario sle-15-SP2-Online-x86_64-fips_ker_mode_tests_crypt_core@64bit fails in
openssl_fips_cipher
This is the new Warning message about the updated openssl, in order to overcome the Warning message, we have to adjust the test suite and add -pbkdf2 parameter.
*** WARNING : deprecated key derivation used.
Using -iter or -pbkdf2 would be better.
Bug¶
bsc#1163802 - [SLES15SP2] [BETA3] [139.4] [openssl] Encrypt a file using AES-128 reports warning msg " deprecated key derivation used"
Test suite description¶
Maintainer: bchou@suse.com
Expected result¶
Last good: (unknown)
Further details¶
Always latest result in this scenario: latest
Updated by rfan1 about 4 years ago
Thanks Ben!
We may need add the parameter (e.g. "-pbkdf2") when we try to decrypt the files.
sample as below:
ocalhost:~/FIPS # openssl enc -des-ede3 -e -pbkdf2 -in hello.txt -out hello.txt.enc -k pass1234 -md sha256
localhost:~/FIPS # openssl enc -des-ede3 -d -pbkdf2 -in hello.txt.enc -out hello.txt.tmp -k pass1234 -md sha256
Updated by bchou about 4 years ago
- Subject changed from [sle][security][sle15sp2][FIPS] test fails in openssl_fips_cipher about WARNING : deprecated key derivation used. to [sle][security][sle15sp2][FIPS] test fails in openssl_fips_cipher about WARNING : deprecated key derivation used. (-pbkdf2 missing)
- Status changed from New to In Progress
Updated by bchou about 4 years ago
- Status changed from In Progress to Resolved
PR is merged and change to resolved. Thanks.
https://github.com/os-autoinst/os-autoinst-distri-opensuse/pull/9792