RHEL9: cannot ssh password-less to a system with FIPS enabled: getting "error in libcrypto" message

Solution Verified - Updated -

Issue

  • Trying to connect to a system with FIPS enabled from a RHEL9.0 system, the following message is seen and password prompted for

    $ ssh -vvv user@system
    [...]
    debug1: Server accepts key: /root/.ssh/id_rsa RSA SHA256:mZrafjEjVNCD8qhXqmUf+D6JRUtW1JnkBVcXnDAwr30
    debug3: sign_and_send_pubkey: RSA SHA256:mZrafjEjVNCD8qhXqmUf+D6JRUtW1JnkBVcXnDAwr30
    debug3: sign_and_send_pubkey: signing using rsa-sha2-256 SHA256:mZrafjEjVNCD8qhXqmUf+D6JRUtW1JnkBVcXnDAwr30
    debug1: identity_sign: sshkey_sign: error in libcrypto
    sign_and_send_pubkey: signing failed for RSA "/root/.ssh/id_rsa": error in libcrypto
    [...]
    

Environment

  • Red Hat Enterprise Linux 9
    • FIPS
    • openssh

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content