uvtool

~paelzer/uvtool:fips-forbids-dsa

Git
lp:~paelzer/uvtool
fips-forbids-dsa

Last commit made on 2021-07-19

Get this branch:: git clone -b fips-forbids-dsa https://git.launchpad.net/~paelzer/uvtool

Only Christian Ehrhardt  can upload to this branch. If you are Christian Ehrhardt  please log in for upload directions.

Branch merges

Merged into uvtool:master at revision 0e92d8b6e6ddd766f41824a52d8af0f221f0f9fd

Robie Basak: Needs Fixing on 2021-07-16

Branch information

Name:: fips-forbids-dsa

Repository:: lp:~paelzer/uvtool

Recent commits

0e92d8b... by Christian Ehrhardt  on 2021-07-16

tolerate if some key types can't be created (LP: #1936473)

For example in FIPS mode we otherwise abort with
DSA keys are not allowed in FIPS mode^M
Traceback (most recent call last):
  File "/usr/bin/uvt-kvm", line 35, in <module>
    uvtool.libvirt.kvm.main_cli_wrapper(sys.argv[1:])
  File "/usr/lib/python2.7/dist-packages/uvtool/libvirt/kvm.py", line 861, in main_cli_wrapper
    main(*args, **kwargs)
  File "/usr/lib/python2.7/dist-packages/uvtool/libvirt/kvm.py", line 856, in main
    args.func(parser, args)
  File "/usr/lib/python2.7/dist-packages/uvtool/libvirt/kvm.py", line 643, in main_create
    ssh_host_keys, ssh_known_hosts = uvtool.ssh.generate_ssh_host_keys()
  File "/usr/lib/python2.7/dist-packages/uvtool/ssh.py", line 50, in generate_ssh_host_keys
    _keygen(key_type, private_path)
  File "/usr/lib/python2.7/dist-packages/uvtool/ssh.py", line 34, in _keygen
    '-C', 'root@localhost'
  File "/usr/lib/python2.7/subprocess.py", line 190, in check_call
    raise CalledProcessError(retcode, cmd)
subprocess.CalledProcessError: Command '['ssh-keygen', '-q', '-f', '/tmp/uvt-kvm.sshtmpVhmPlF/dsa', '-N', '', '-t', 'dsa', '-C', 'root@localhost']' returned non-zero exit status 255