Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

#3398: Fix for FIPS enabled in bookshelf using bookshelf s3 url with … #1

Merged
merged 1 commit into from
Jul 8, 2022

Conversation

srijitncoupa
Copy link
Owner

…localhost setting in chef-server.rb

Description

Updated oc_erchef.config.erb with s3 url location for FIPS enabled .
<% if node['private_chef']['fips_enabled'] -%>
%% When we're using a fips openssl, we default to using http for bookshelf.
%% The reason for this is because we do not have a TLS implementation for
%% Erlang when we turn on fips.
%%
%% This is the reason that the only supported configuration for the fips
%% package is standalone. We will allow http over localhost so that the
%% chef server can talk to bookshelf. We can give provide bookshelf['url'] = 'http://127.0.0.1:4321' for naking it work for FIPS enabled
%% {s3_url, "http://<%= node['private_chef']['bookshelf']['listen'] %>:<%= node['private_chef']['bookshelf']['port'] %>"},
{s3_url, "<%= @helper.bookshelf_s3_url %>"},
<% else -%>
{s3_url, "<%= @helper.bookshelf_s3_url %>"},
<% end %>

Issues Resolved

chef#3398 issu has been resolved with this fix for FIPS
[List any existing issues this PR resolves, or any Discourse or
StackOverflow discussions that are relevant]

Check List

@srijitncoupa srijitncoupa merged commit 058367e into main Jul 8, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant