Bug 1212025

Summary:	Salt is failing due to openssl-1_1 update
Product:	[openSUSE] PUBLIC SUSE Linux Enterprise Server 15 SP4	Reporter:	Jozef Pupava <jpupava>
Component:	Other	Assignee:	Otto Hollmann <otto.hollmann>
Status:	RESOLVED FIXED	QA Contact:
Severity:	Normal
Priority:	P5 - None	CC:	pmonrealgonzalez, salt-maintainers
Version:	SLES15SP4-MaintUpd
Target Milestone:	---
Hardware:	x86-64
OS:	Other
URL:	https://openqa.suse.de/tests/11254336/modules/salt_master/steps/121
Whiteboard:
Found By:	openQA	Services Priority:
Business Priority:		Blocker:	Yes
Marketing QA Status:	---	IT Deployment:	---
Attachments:	salt minion log

Description Jozef Pupava 2023-06-05 12:59:57 UTC

Created attachment 867406 [details]
salt minion log

Command salt --state-output=terse -t 300 '*' state.highstate failed due to openssl-1_1 update https://build.suse.de/request/show/300416

aes = key.private_decrypt(ret["key"], RSA.pkcs1_oaep_padding)
File "/usr/lib64/python3.6/site-packages/M2Crypto/RSA.py", line 82, in private_decrypt
assert self.check_key(), 'key is not initialised'
AssertionError: key is not initialised

https://openqa.suse.de/tests/11254336/modules/salt_master/steps/121

Comment 1 Otto Hollmann 2023-06-06 15:27:22 UTC

Thank you Josef for reporting.

I haven't debugged this bug, but the root cause from bug 1211999 comment 6 seems to apply here as well.

In short, after applying patch from bug 1207399 comment 37, only one thread is able to obtain entropy so it make sense it fails on key initialization.

I have to rework that patch.

Comment 2 Otto Hollmann 2023-06-21 11:25:46 UTC

I submitted new version and removed offending patch so now it should be fixed. Feel free to close this bug once you verify/rerun tests.

https://build.suse.de/request/show/301576 SLE-15-SP5 / openssl-1_1
https://build.suse.de/request/show/301577 SLE-15-SP4 / openssl-1_1

Comment 3 Jozef Pupava 2023-07-03 23:29:47 UTC

Tests passed and openssl-1_1 updates have been released.