Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Installation fails on Rocky 9 with Signature not supported #21

Open
umeshauv opened this issue Feb 28, 2024 · 2 comments
Open

Installation fails on Rocky 9 with Signature not supported #21

umeshauv opened this issue Feb 28, 2024 · 2 comments
Labels

Comments

@umeshauv
Copy link

I am not sure if Rocky 9 is supported or not. I tried to use the role to install RabbitMQ on Rocky 9.3 and I get the following error.

task path: /tmp/galaxy/roles/geerlingguy.rabbitmq/tasks/setup-RedHat.yml:7
failed: [rabbitmq01] (item=https://packagecloud.io/gpg.key) => changed=false
ansible_loop_var: item
item: https://packagecloud.io/gpg.key
msg: |-
warning: Signature not supported. Hash algorithm SHA1 not available.
error: /tmp/tmpmr4u5_j7: key 1 import failed.
failed: [rabbitmq01] (item=https://packagecloud.io/rabbitmq/erlang/gpgkey) => changed=false
ansible_loop_var: item
item: https://packagecloud.io/rabbitmq/erlang/gpgkey
msg: |-
warning: Signature not supported. Hash algorithm SHA1 not available.
error: /tmp/tmpkyu1vb90: key 1 import failed.
failed: [rabbitmq01] (item=https://packagecloud.io/rabbitmq/rabbitmq-server/gpgkey) => changed=false
ansible_loop_var: item
item: https://packagecloud.io/rabbitmq/rabbitmq-server/gpgkey
msg: |-
warning: Signature not supported. Hash algorithm SHA1 not available.
error: /tmp/tmp7hl9751l: key 1 import failed.
changed: [rabbitmq01] => (item=https://github.com/rabbitmq/signing-keys/releases/download/2.0/rabbitmq-release-signing-key.asc) => changed=true
ansible_loop_var: item
item: https://github.com/rabbitmq/signing-keys/releases/download/2.0/rabbitmq-release-signing-key.asc

@geerlingguy
Copy link
Owner

geerlingguy commented Jul 17, 2024

It's failing in CI as well... I wonder if some other repository may have GPG keys that aren't signed with SHA1 :/

See: Enhancing RHEL Security: Understanding SHA-1 deprecation on RHEL 9.

For now, I'm going to disable RHEL-based CI tests. If nobody can work on getting this working, I may elect to drop Red Hat-based OS support from this role; I don't do much with Erlang so I can't speak too much to easier installation methods.

@geerlingguy
Copy link
Owner

Closing #19 in favor of this issue.

Also see: #18 (review)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

2 participants