Hello all,
After applying updates recently to my Prometheus/Grafana server, client machines viewing the Grafana web page see errors in each of the data display widgets. Hovering over the red triangle in upper left of each widget shows the following error message:
(note: I had to slightly edit of the url in the error messages to remove “links”, I didn’t want to post links, just the text from the error message)
“Post “https_//10_10_10_123:9091/api/v1/query_range”: tls: FIPS 140-3 requires the use of Extended Master Secret”
This was all working as expected before my updates on Jan 15. I am not sure if this is an issue with my Prometheus settings, or with my Grafana settings, and/or something else like allowed cryptographic algorithms on the server, etc.
Client computers can view Prometheus data in the Prometheus Web UI even after the updates. It’s only the Grafana Web UI that cannot show Prometheus data.
Can someone help me figure out what I need to fix or update in my environment to get the Grafana displays working again?
Here is my setup:
10.10.10.123 = RHEL 8.10 computer that runs Prometheus data collection service and runs Grafana http server service
10.10.11.234 = client computer that can look at Grafana Web UI showing Prometheus data, or the Prometheus Web UI
In Grafana when I configure the Prometheus datasource now, whether I Use or Skip “TLS Verify” for the Prometheus url, I get the following error:
Error reading Prometheus: Post “https_//10_10_10_123:9091/api/v1/query”: tls: FIPS 140-3 requires the use of Extended Master Secret
Before the updates Grafana was able to show the Prometheus data.
Here are the current versions of Prometheus and Grafana on the RHEL 8.10 server:
golang-github-prometheus.x86_64 2.32.1-2.el8
golang-github-prometheus-alertmanager.x86_64 0.23.0-7.el8
golang-github-prometheus-node-exporter.x86_64 1.3.1-4.el8
grafana.x86_64 9.2.10-26.el8_10
grafana-pcp.x86_64 5.1.1-10.el8_10
grafana-selinux.x86_64 9.2.10-26.el8_10
There seem to be two main errors in the logs on the RHEL 8.10 computer related to this issue:
Jan 22 12:04:30 gserver1 prometheus[2701]: ts=2026-01-22T12:04:30.792Z caller=stdlib.go:105 level=error component=web caller=“http: TLS handshake error from 10.10.10.123:35914” msg=“remote error: tls: handshake failure”
Jan 22 12:04:30 gserver1 grafana-server[2704]: logger=tsdb.prometheus t=2026-01-22T12:04:30.806350022Z level=error msg=“Range query failed” query=node_load1 err=“Post “https_//10_10_10_123:9091/api/v1/query_range\”: tls: FIPS 140-3 requires the use of Extended Master Secret”
Does anyone have suggestions on how I might fix this issue?
Thanks for any help you can provide!