Project SCM sync error on new install

Archives AWX Project
1

I have a new install, after creating the project and credential I’m getting the following error when trying to sync. I’ve tried my username/password and private key.

“stderr_lines”: [
“Cloning into ‘/var/lib/awx/projects/_8__automation_project’…”,
“fatal: unable to access ‘https://$encrypted$:$encrypted$@github.Fake.com/Automation/Fake.git/’: error:141A318A:SSL routines:tls_process_ske_dhe:dh key too small”
],

Is there something that needs to be done on the task or web container to poing to my github.fake.com URL. By the way this is a private URL its real name isn’t fake.

Thanks

2

From a quick google search: https://stackoverflow.com/questions/36417224/openssl-dh-key-too-small-error

I wouldn’t recommend you disable tls, would probably be better to just generate a better certificate. Otherwise you’ll need to find a way to work around it.

3

Was able to work around it but setting SECLEVEL=1 from 2.

/etc/crypto-policies/back-ends/opensslcnf.config

CipherString = @SECLEVEL=1:kEECDH:kRSA:kEDH:kPSK:kDHEPSK:kECDHEPSK:-aDSS:-3DES:!DES:!RC4:!RC2:!IDEA:-SEED:!