puppetlabs/puppet · error · Puppet::Error

No FIPS 140-2 compliant digest algorithm in OpenSSL::Digest

Error message

No FIPS 140-2 compliant digest algorithm in OpenSSL::Digest

What it means

Error "No FIPS 140-2 compliant digest algorithm in OpenSSL::Digest" thrown in puppetlabs/puppet.

Source

Thrown at lib/puppet/ssl/certificate_signer.rb:25

# @api private
class Puppet::SSL::CertificateSigner
  # @!attribute [r] digest
  #   @return [OpenSSL::Digest]
  attr_reader :digest

  def initialize
    if OpenSSL::Digest.const_defined?('SHA256')
      @digest = OpenSSL::Digest::SHA256
    elsif OpenSSL::Digest.const_defined?('SHA1')
      @digest = OpenSSL::Digest::SHA1
    elsif OpenSSL::Digest.const_defined?('SHA512')
      @digest = OpenSSL::Digest::SHA512
    elsif OpenSSL::Digest.const_defined?('SHA384')
      @digest = OpenSSL::Digest::SHA384
    elsif OpenSSL::Digest.const_defined?('SHA224')
      @digest = OpenSSL::Digest::SHA224
    else
      raise Puppet::Error,
            "No FIPS 140-2 compliant digest algorithm in OpenSSL::Digest"
    end
  end

  # Sign a certificate signing request (CSR) with a private key.
  #
  # @param [OpenSSL::X509::Request] content The CSR to sign
  # @param [OpenSSL::X509::PKey] key The private key to sign with
  #
  # @api private
  def sign(content, key)
    content.sign(key, @digest.new)
  end
end

View on GitHub (pinned to e227c27540)

When it happens

Trigger: Thrown at lib/puppet/ssl/certificate_signer.rb:25 when the library encounters an invalid state.

Common situations: See trigger scenarios.

AI-assisted analysis of puppetlabs/puppet@e227c27540 (2026-08-21). Data as JSON: /api/errors/b6be265bb86df878. Report an issue: GitHub.