Bug 1212025 - Salt is failing due to openssl-1_1 update
Summary: Salt is failing due to openssl-1_1 update
Status: RESOLVED FIXED
Alias: None
Product: PUBLIC SUSE Linux Enterprise Server 15 SP4
Classification: openSUSE
Component: Other (show other bugs)
Version: SLES15SP4-MaintUpd
Hardware: x86-64 Other
: P5 - None : Normal
Target Milestone: ---
Assignee: Otto Hollmann
QA Contact:
URL: https://openqa.suse.de/tests/11254336...
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2023-06-05 12:59 UTC by Jozef Pupava
Modified: 2023-07-03 23:29 UTC (History)
2 users (show)

See Also:
Found By: openQA
Services Priority:
Business Priority:
Blocker: Yes
Marketing QA Status: ---
IT Deployment: ---

Attachments
salt minion log (42.15 KB, text/plain)
2023-06-05 12:59 UTC, Jozef Pupava 		Details
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Jozef Pupava 2023-06-05 12:59:57 UTC 
Created attachment 867406 [details]
salt minion log

Command salt --state-output=terse -t 300 '*' state.highstate failed due to openssl-1_1 update https://build.suse.de/request/show/300416

aes = key.private_decrypt(ret["key"], RSA.pkcs1_oaep_padding)
File "/usr/lib64/python3.6/site-packages/M2Crypto/RSA.py", line 82, in private_decrypt
assert self.check_key(), 'key is not initialised'
AssertionError: key is not initialised

https://openqa.suse.de/tests/11254336/modules/salt_master/steps/121
Comment 1 Otto Hollmann 2023-06-06 15:27:22 UTC 
Thank you Josef for reporting.

I haven't debugged this bug, but the root cause from bug 1211999 comment 6 seems to apply here as well.

In short, after applying patch from bug 1207399 comment 37, only one thread is able to obtain entropy so it make sense it fails on key initialization.

I have to rework that patch.
Comment 2 Otto Hollmann 2023-06-21 11:25:46 UTC 
I submitted new version and removed offending patch so now it should be fixed. Feel free to close this bug once you verify/rerun tests.

https://build.suse.de/request/show/301576 SLE-15-SP5 / openssl-1_1
https://build.suse.de/request/show/301577 SLE-15-SP4 / openssl-1_1
Comment 3 Jozef Pupava 2023-07-03 23:29:47 UTC 
Tests passed and openssl-1_1 updates have been released.