rabbitmq / rabbitmq-server

Open source RabbitMQ: core server and tier 1 (built-in) plugins
https://www.rabbitmq.com/
Other
12.15k stars 3.91k forks source link

Rabbit server fails to start with credentials_obfuscation error on FIPS compliant server #11610

Closed reuvenstr closed 3 months ago

reuvenstr commented 3 months ago

Describe the bug

Hi, After enabling FIPS mode on Ubuntu 22.04 it fails to start rabbit-server (3.12.12-1) with erlang (1:26.2.1-1)

{application_start_failure,credentials_obfuscation,{{shutdown,{failed_to_start_child,credentials_obfuscaton_svc,{low_entropy,[{crypto,strong_rand_bytes,1,[{file,\"crypto.erl\"},{line,1155}]},{credentials_obfuscation_svc,check,3,[{file,\"src/credentials_obfuscation_svc.erl\"},{line,197}]},{credentials_obfuscation_svc,init_state,0,[{file,\"src/credentials_obfuscation_svc.erl\"},{line,169}]},{gen_server,init_it,2,[{file,\"gen_server.erl\"},{line,980}]},{gen_server,init_it,6,[{file,\"gen_server.erl\"},{line,935}]},{proc_lib,init_p_do_apply,3,[{file,\"proc_lib.erl\"},{line,241}]}]}}},{credentials_obfuscation_app,start,[normal,[]]}}}

Crash dump is being written to: erl_crash.dump...done

Is there any solution without upgrading rabbitmq/erlang versions? Thanks for your time 😄

Reproduction steps

  1. Install ubuntu 22.04, rabbitmq-server. Check everything is fine
  2. Enable FIPS mode and restart server
  3. rabbitmq server is failing to start ...

Expected behavior

rabbitmq server is working fine on ubuntu 22.04 with FIPS mode

Additional context

Any additional information will be provided upon request