Adding #nosec for pycrypto use

As the pycrypto library is being replaced by the cryptography module,
the bandit library would like to warn the use of pycrypto in [0]. Currently,
barbican still use pycrypto and work is being done to update that in [1],
this patch set proposes to #nosec the outstanding pycrypto use for the
bandit patch to pass - the #nosec should be consequently removed in [1].

[0] https://review.openstack.org/#/c/530287/
[1] https://review.openstack.org/#/c/458196/

Change-Id: I0b1a90c3a47ad6d3b18597e5315e9f017854a146
This commit is contained in:
Tin Lam 2018-02-04 09:53:34 -06:00
parent b17013e6bd
commit 09caab6c2c
2 changed files with 3 additions and 3 deletions
barbican
plugin
tests/plugin

@ -19,8 +19,8 @@ import datetime
import os
from oslo_utils import uuidutils
from Crypto.PublicKey import RSA
from Crypto.Util import asn1
from Crypto.PublicKey import RSA # nosec
from Crypto.Util import asn1 # nosec
import pki
subcas_available = True

@ -18,7 +18,7 @@ import datetime
import os
import tempfile
from Crypto.PublicKey import RSA
from Crypto.PublicKey import RSA # nosec
import mock
from requests import exceptions as request_exceptions
import testtools