Fail To Install Gateway RPM On RedHat 8 With FIPS Mode Enabled At The OS Level

Products

• CA API Gateway

Issue/Introduction

We are looking to install a software gateway on RedHat 8 which has FIPS mode enabled at the OS level.

When installing the gateway rpm we receive the following error:

# rpm -ivh ssg-10.1.00-11620.noarch

package ssg-10.1.00-11620.noarch does not verify: no digest

Environment

CA API Gateway 10.x, 11.0

Cause

RedHat 8 requires more strict packaging signing with SHA256 when FIPS is enabled.

Resolution

We have a feature request to look at improving the gateway install in a future release when FIPS mode is enabled at the OS level.

The current work around is to first install and configure your software gateway.  Once that is complete you can then enable FIPS mode at the OS level.

 

Additional Information

F135656