<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal">I’m in the unfortunate position of having to use TeXLive 20190410 on an offline CentOS7 system that is STIG’d meaning FIPS is enabled. I downloaded the offline tarballs and have successfully extracted the files into the correct directory
structure. I can even build a pdf using texexec…..when FIPS is disabled. Unfortunately IT requires FIPS be enabled and that is when I receive an error trying to use texexec because under the covers somewhere it is using an MD5 hash for something.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I’ve done a large amount of scouring of online forums trying to find a workaround and have been unsuccessful thus far. I did some digging in the files contained in the tarballs and found things dealing with Digest::MD5 in tlpkg/TeXLive/TLCrypto.pm.
I tried changing that file to use SHA1 but it made no difference.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Here is the exact error I’m receiving:<o:p></o:p></p>
<p class="MsoNormal">md5_dgst.c(82): OpenSSL internal error, assertion failed: Digest MD5 forbidden in FIPS mode!<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I’m stuck with the machines provided and the IA/IT configuration so I need to find a way to make this work when FIPS is enabled. Any help is greatly appreciated.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span style="font-size:10.5pt;color:black">--------<o:p></o:p></span></p>
<p class="MsoNormal"><b><span style="font-size:12.0pt;color:black">Bryan Novack<o:p></o:p></span></b></p>
<p class="MsoNormal"><span style="color:black">Dynetics, Inc.<br>
Office: 256.964.4546<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black"><a href="mailto:bryan.novack@dynetics.com"><span style="color:blue">bryan.novack@dynetics.com</span></a></span><u><span style="color:blue"><o:p></o:p></span></u></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<i><br>
<hr>
<p style="font-size:8pt; line-height:9pt; font-style:monospace">The information contained in this message, and any attachments, may contain privileged and/or proprietary information that is intended solely for the person or entity to which it is addressed.
Moreover, it may contain export restricted technical data controlled by Export Administration Regulations (EAR) or the International Traffic in Arms Regulations (ITAR). Any review, retransmission, dissemination, or re-export to foreign or domestic entities
by anyone other than the intended recipient in accordance with EAR and/or ITAR regulations is prohibited.</p>
</i>
</body>
</html>