Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

RHEL 9 installation fails #97614

Closed
JensVD opened this issue Jul 12, 2023 · 4 comments
Closed

RHEL 9 installation fails #97614

JensVD opened this issue Jul 12, 2023 · 4 comments
Labels
>bug :Delivery/Packaging RPM and deb packaging, tar and zip archives, shell and batch scripts Team:Delivery Meta label for Delivery team

Comments

@JensVD
Copy link

JensVD commented Jul 12, 2023

Elasticsearch Version

Version: 7.17.11, Build: default/rpm/eeedb98c60326ea3d46caef960fb4c77958fb885/2023-06-23T05:33:12.261262042Z, JVM: 20.0.1

Installed Plugins

No response

Java Version

openjdk version "1.8.0_362"

OS Version

Linux server 5.14.0-333.el9.x86_64 #1 SMP PREEMPT_DYNAMIC Wed Jun 28 09:47:27 UTC 2023 x86_64 x86_64 x86_64 GNU/Linux

Problem Description

When trying to install any ElasticSearch related application on a RHEL9 based system it blocks due to the GPG checks. The reason for this is the deprecation of the SHA1 algorithm starting in RHEL9 based system.
The ElasticSearch GPG key seems to be signed using the SHA1 algorithm which is no longer secure and has been blocked since RHEL9.

This doesn't just affect ElasticSearch but all elastic.co products.

Steps to Reproduce

  1. Create a VM with CentOS9 (or another RHEL9 based system)
  2. Import the RPM key and watch it fail
    sudo rpm --import https://artifacts.elastic.co/GPG-KEY-elasticsearch

warning: Signature not supported. Hash algorithm SHA1 not available. error: https://artifacts.elastic.co/GPG-KEY-elasticsearch: key 1 import failed.

Logs (if relevant)

No response
@JensVD JensVD added >bug needs:triage Requires assignment of a team area label labels Jul 12, 2023
@pquentin pquentin added :Delivery/Packaging RPM and deb packaging, tar and zip archives, shell and batch scripts and removed needs:triage Requires assignment of a team area label labels Jul 13, 2023
@elasticsearchmachine elasticsearchmachine added the Team:Delivery Meta label for Delivery team label Jul 13, 2023
@elasticsearchmachine
Copy link
Collaborator

Pinging @elastic/es-delivery (Team:Delivery)

@mark-vieira
Copy link
Contributor

Duplicate of #85876.

@armghan
Copy link

armghan commented Sep 21, 2023

When will this issue be fixed? @elasticsearchmachine

@mark-vieira
Copy link
Contributor

When will this issue be fixed? @elasticsearchmachine

This has been resolved: #85876 (comment)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
>bug :Delivery/Packaging RPM and deb packaging, tar and zip archives, shell and batch scripts Team:Delivery Meta label for Delivery team
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
5 participants
@pquentin @mark-vieira @armghan @JensVD @elasticsearchmachine