canonical-ubuntu-qa team mailing list archive

[Magali Lemes do Sacramento <2120501@xxxxxxxxxxxxxxxxxx>]

>From what I understood, this is something to be fixed in nmap's ncat.
In ncat/ncat_ssl.c, openssl's legacy provider seems to be hard-coded to be loaded, which seems unnecessary and the FIPS provider should already be available and loaded without any need for the code to try to load a provider by itself.

-- 
You received this bug notification because you are a member of Canonical
Platform QA Team, which is subscribed to ubuntu-kernel-tests.
https://bugs.launchpad.net/bugs/2120501

Title:
  migration and panic tests from kvm-unit-tests fail on n:fips

Status in ubuntu-kernel-tests:
  New

Bug description:
  Several test cases from ubuntu_kvm_unit_tests are failing with n:fips.
  The issue was found with n:fips version 6.8.0-72.72+fips1 in the 2025.07.14 cycle.
  On arm-server:
  - debug-bp-migration
  - debug-sstep-migration
  - debug-wp-migration
  - its-migrate-unmapped-collection
  - its-migration
  - its-pending-migration
  On s2lp3.s390x.lpar:
  - migration
  - migration-cmm
  - migration-memory
  - migration-sck
  - migration-skey-parallel
  - migration-skey-sequential
  - panic-loop-extint
  - panic-loop-pgm
  - selftest-migration

  They are all failing similarly with the following line:
  OpenSSL failed to create a new SSL_CTX: error:0A0000A1:SSL routines::library has no ciphers

  Although this look arch-specific, it isn't. These tests either have
  `run_migration` or `run_panic`, which isn't part of the tests
  triggered for amd64.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu-kernel-tests/+bug/2120501/+subscriptions