search

guilhemmarchand / TA-jira-service-desk-simple-addon

Atlasian JIRA add-on for Splunk alert actions
11 stars 8 forks source link

FIPS error when creating tickets #197

Open jake-choi-cf opened 2 weeks ago

jake-choi-cf commented 2 weeks ago

Hello,

I'm receiving an error when Splunk attempts to create Jira tickets. I've confirmed that the Jira projects are visible in the dashboard which means that the account configuration is correct and Jira is reachable. However, I'm noticing that the logs are saying that hte ticket is failing to be created. The error appears to only affect Splunk versions 9.3+ as I'm not noticing the issues in environments using Splunk 9.2.

An example of the error message: ERROR tid=MainThread file=cim_actions.py:message:292 | sendmodaction - signature="Unexpected error: [digital envelope routines: FIPS_DIGESTINIT] disabled for fips." action_name="jira_service_desk"

guilhemmarchand commented 2 weeks ago

Hi @jake-choi-cf

I see where the issue stands, the app uses md5 for different purposes which was (sliently) fixed since Splunk 9.3.0. In FIPS, md5 is considered weak and should be disabled, Splunk wasn't honouring that, I need to migrate the app to use sha256 instead. (did for some other apps)

Will look at it for a release update

jake-choi-cf commented 2 weeks ago

Thank you for looking into it and the quick response!

Would you happen to have a target date for the next release?