Unable to install AAP 2.X on RHEL8 /w FIPS

Latest response

Has anyone been able to install AAP 2.X on a FIPS enabled (fips-mode-setup --enable) RHEL system? My end goal is to install in AWS in a FedRAMP environment.

I attempted the install in multiple environments (AWS, vSphere) and was able to omit all other security (CIS) other than FIPS and determine that FIPS alone will break it.

Screenshot 01 shows the failure point (testing Receptor mesh connectivity). Screenshot 02 contains the messages from /var/log/receptor/receptor.log.

We are supposedly technology partners with Red Hat, but they tell me I'm not entitled to technical support, so I'm hoping someone else who works in a DOD or security-centric environment ran into this issue before.

The Receptor GitHub seems to suggest that the quic-go library being used may not work with FIPS:
https://github.com/ansible/receptor/issues/221

Previous versions of Ansible Tower was explicitly compatible with FIPS, wanted to see if this changed for AAP? I'm hoping that this isn't the case since I'd imagine Red Hat has government clients.

Screenshot
Screenshot

HW

Responses