You should rebuild using libgmp >= 5 to avoid timing attack vulnerability.

错误提示“You should rebuild using libgmp >= 5 to avoid timing attack vulnerability.”

1 2 3 4 5 6 7 8 9 10 11 12 13 14

[root@linux-node1 images]# openstack-status == Glance services == openstack-glance-api:                   active openstack-glance-registry:              active == Keystone service == openstack-keystone:                     active == Support services == libvirtd:                               active messagebus:                             active rabbitmq-server:                        active memcached:                              inactive  (disabled on boot) == Keystone users == /usr/lib64/python2.6/site-packages/Crypto/Util/number.py:57: PowmInsecureWarning: Not using mpz_powm_sec.  You should rebuild using libgmp >= 5 to avoid timing attack vulnerability.   _warn("Not using mpz_powm_sec.  You should rebuild using libgmp >= 5 to avoid timing attack vulnerability.", PowmInsecureWarning)

处理方法：

说明：在Centos6.7系统中自带GMP version 4，但是一些应用如PyCrypto需要使用GMP >= 5。

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16

# yum -y groupinstall "Development tools" # yum -y install gcc libgcc glibc libffi-devel libxml2-devel libxslt-devel openssl-devel zlib-devel bzip2-devel ncurses-devel python-devel # tar xvjf gmp-6.1.0.tar.bz2  # cd gmp-6.1.0 # ls # ./configure  # echo $? # make # echo $? # make check # echo $? # make install # echo $? # yum install python-pip -y #pip install --ignore-installed PyCrypto # /etc/init.d/openstack-keystone restart

问题得到解决，记录下

本文转自 冰冻vs西瓜 51CTO博客，原文链接：http://blog.51cto.com/molewan/1727258，如需转载请自行联系原作者