Corosync regularly reports "nsscrypto: Digest does not match" error

Solution Verified - Updated -

Issue

Corosync reports nsscrypto: Digest does not match error:

$ cat /var/log/messages
----------------------------------->8----------------------------------
May 22 12:43:22 rhel8-node1 corosync[8017]:  [KNET  ] nsscrypto: Digest does not match <---
May 22 12:43:23 rhel8-node1 corosync[8017]:  [KNET  ] nsscrypto: Digest does not match
May 22 12:43:23 rhel8-node1 corosync[8017]:  [KNET  ] nsscrypto: Digest does not match
May 22 12:43:23 rhel8-node1 pacemaker-attrd[8033]: notice: Connecting to corosync cluster infrastructure
May 22 12:43:23 rhel8-node1 pacemaker-controld[8035]: notice: Connecting to corosync cluster infrastructure
May 22 12:43:23 rhel8-node1 pacemaker-attrd[8033]: notice: Node rhel8-node1priv state is now member
May 22 12:43:23 rhel8-node1 pacemaker-fenced[8031]: notice: Pacemaker fencer successfully started and accepting connections
May 22 12:43:23 rhel8-node1 pacemaker-attrd[8033]: notice: Pacemaker node attribute manager successfully started and accepting connections
May 22 12:43:23 rhel8-node1 pacemaker-attrd[8033]: notice: Setting #attrd-protocol[rhel8-node1priv]: (unset) -> 3
May 22 12:43:23 rhel8-node1 pacemaker-attrd[8033]: notice: Recorded local node as attribute writer (was unset)
May 22 12:43:23 rhel8-node1 pacemaker-controld[8035]: warning: No quorum
May 22 12:43:23 rhel8-node1 pacemaker-controld[8035]: notice: Node rhel8-node1priv state is now member
May 22 12:43:23 rhel8-node1 pacemaker-controld[8035]: notice: Pacemaker controller successfully started and accepting connections
May 22 12:43:23 rhel8-node1 pacemaker-controld[8035]: notice: State transition S_STARTING -> S_PENDING
May 22 12:43:23 rhel8-node1 corosync[8017]:  [KNET  ] nsscrypto: Digest does not match
May 22 12:43:24 rhel8-node1 corosync[8017]:  [KNET  ] nsscrypto: Digest does not match
May 22 12:43:24 rhel8-node1 corosync[8017]:  [KNET  ] rx: host: 2 link: 0 is up
May 22 12:43:24 rhel8-node1 corosync[8017]:  [KNET  ] host: host: 2 (passive) best link: 0 (pri: 1)
May 22 12:43:24 rhel8-node1 corosync[8017]:  [KNET  ] nsscrypto: Digest does not match
May 22 12:43:24 rhel8-node1 corosync[8017]:  [KNET  ] pmtud: PMTUD link change for host: 2 link: 0 from 469 to 1397
May 22 12:43:24 rhel8-node1 corosync[8017]:  [KNET  ] pmtud: Global data MTU changed to: 1397
May 22 12:43:24 rhel8-node1 corosync[8017]:  [QUORUM] Sync members[2]: 1 2
May 22 12:43:24 rhel8-node1 corosync[8017]:  [QUORUM] Sync joined[1]: 2
May 22 12:43:24 rhel8-node1 corosync[8017]:  [TOTEM ] A new membership (1.9) was formed. Members joined: 2
May 22 12:43:24 rhel8-node1 pacemaker-fenced[8031]: notice: Node rhel8-node2 state is now member
May 22 12:43:24 rhel8-node1 pacemaker-attrd[8033]: notice: Node rhel8-node2 state is now member
May 22 12:43:24 rhel8-node1 pacemaker-based[8030]: notice: Node rhel8-node2 state is now member

This issue does not affect node membership or connectivity.

Environment

  • Red Hat Enterprise Linux 8 and 9 (with the High Availability Add-On)
  • Pacemaker

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content