Ensure legacy crypto policies for RHEL > 8

[pietaj]

Running this role on a fresh Rocky9 machine fails returning a Hash algorithm SHA1 not available error. I guess the error is caused by the SHA1 deprecation on RHEL9 https://www.redhat.com/en/blog/rhel-security-sha-1-package-signatures-distrusted-rhel-9.

The official rabbitmq docs https://www.rabbitmq.com/install-rpm.html#package-cloud state, that:

Note that if any of the above import commands finishes with an error due to the SHA1 hash algorithm, you must execute the following first: sudo update-crypto-policies --set LEGACY And then retry the failed import command(s).

I was able to workaround this issue by applying the proposed changes.

On the other hand, maybe the crypto policies strategy should be recorded beforehand and changed only if it's not in LAGACY mode? Otherwise this might accidentally change someone's LEGACY setting to DEFAULT? What do you thing @geerlingguy

[geerlingguy]

Is it possible for you to also add rockylinux9 to the test matrix in the github CI workflow, so it can be tested?

[geerlingguy]

D'oh! Running into:

TASK [geerlingguy.rabbitmq : Ensure erlang is installed.] **********************
  fatal: [instance]: FAILED! => {"changed": false, "failures": ["No package erlang available."], "msg": "Failed to install some of the specified packages", "rc": 1, "results": []}

Along with: https://github.com/geerlingguy/ansible-role-rabbitmq/issues/19

[github-actions[bot]]

This pr has been marked 'stale' due to lack of recent activity. If there is no further activity, the issue will be closed in another 30 days. Thank you for your contribution!

Please read this blog post to see the reasons why I mark issues as stale.

[stale[bot]]

This pull request is no longer marked for closure.

[stale[bot]]

This pull request is no longer marked for closure.