Troubleshooting
Problem
Due to deprecation of SHA1 on Red Hat Enterprise Linux 9, the system might block the installation of the MVFS RPM from some ClearCase® versions.
Symptom
ClearCase® multiversion file system (MVFS) cannot be installed on Red Hat Enterprise Linux 9.
Cause
On ClearCase® versions 9.0.1.14, 9.0.2.6, and 9.1.0.3, the MVFS RPM is signed using SHA1. SHA1 checksum is deprecated by default on Red Hat Enterprise Linux 9, which causes the system to refuse the MVFS RPM installation.
Environment
ClearCase® 9.0.1.14, 9.0.2.6, and 9.1.0.3.
Red Hat Enterprise Linux 9.
Diagnosing The Problem
Check if you are running one of the ClearCase® versions listed in the Environment section:
# /opt/rational/clearcase/bin/cleartool -ver
Check what is the cryptographic policy for your system:
# update-crypto-policies --show
DEFAULT
If it is
DEFAULT
, then SHA1 is blocked.Run this command to extract the source code from the SRPM MVFS package:
# /opt/rational/clearcase/etc/install_mvfs.sh -v makesrc "" /tmp | grep BAD
Your system is affected if the output shows something like this:
error: /var/adm/rational/clearcase/mvfs/rpm/src/mvfs-9.0.2.06-5.14.0_70.13.1_20220627.el9_0.src.rpm: Header V4 RSA/SHA1 Signature, key ID 12345678: BAD
Resolving The Problem
The MVFS RPM is signed using SHA256 as of ClearCase versions 9.0.2.7, 9.1.0.4, and 10.0.
If installing a release prior to those, this issue can be worked around by temporarily modifying the cryptographic policy for your system if the current configuration blocks the installation of RPM packages with a SHA1 signature.
- Use this command to show the current policy setting:
# update-crypto-policies --show
- Use this command to allow the installation of the MVFS RPM if dynamic or automatic view features are going to be installed:
# update-crypto-policies --set DEFAULT:SHA1
After the installation, this setting can be reverted to the setting that was in effect previously.
Document Location
Worldwide
[{"Type":"MASTER","Line of Business":{"code":"LOB45","label":"Automation"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSSH27","label":"IBM Rational ClearCase"},"ARM Category":[{"code":"a8m0z000000boUPAAY","label":"ClearCase-\u003ECore-\u003EMVFS"},{"code":"a8m0z000000bo4qAAA","label":"ClearCase-\u003EInstallation\/Upgrade"}],"ARM Case Number":"","Platform":[{"code":"PF016","label":"Linux"}],"Version":"10.0.0;9.0.1;9.0.2;9.1.0"}]
Was this topic helpful?
Document Information
Modified date:
22 January 2024
UID
ibm16837627