oslo.versionedobjects/lower-constraints.txt
Ade Lee 9f0f31eb8b Replace md5 with oslo version
md5 is not an approved algorithm in FIPS mode, and trying to
instantiate a hashlib.md5() will fail when the system is running in
FIPS mode.

md5 is allowed when in a non-security context.  There is a plan to
add a keyword parameter (usedforsecurity) to hashlib.md5() to annotate
whether or not the instance is being used in a security context.

In the case where it is not, the instantiation of md5 will be allowed.
See https://bugs.python.org/issue9216 for more details.

Some downstream python versions already support this parameter.  To
support these versions, a new encapsulation of md5() has been added to
oslo_utils.  See https://review.opendev.org/#/c/750031/

This patch is to replace the instances of hashlib.md5() with this new
encapsulation, adding an annotation indicating whether the usage is
a security context or not.

In this case, md5 is computed as one of the object hashes for the
purposes of object versioning.

Change-Id: Idf36897d690a20d23123950618643d0b9e085f6c
Depends-On: https://review.opendev.org/#/c/760160
2020-10-29 13:30:07 -04:00

70 lines
1.2 KiB
Plaintext

amqp==2.1.1
appdirs==1.3.0
Babel==2.3.4
bandit==1.4.0
cachetools==2.0.0
contextlib2==0.4.0
coverage==4.0
debtcollector==1.2.0
eventlet==0.18.2
extras==1.0.0
fasteners==0.7.0
fixtures==3.0.0
futurist==1.2.0
gitdb==0.6.4
GitPython==1.0.1
greenlet==0.4.15
iso8601==0.1.11
Jinja2==2.10
jsonschema==3.2.0
keystoneauth1==3.4.0
kombu==4.0.0
linecache2==1.0.0
MarkupSafe==1.1.1
mox3==0.20.0
msgpack-python==0.4.0
netaddr==0.7.18
netifaces==0.10.4
os-client-config==1.28.0
oslo.concurrency==3.26.0
oslo.config==5.2.0
oslo.context==2.19.2
oslo.i18n==3.15.3
oslo.log==3.36.0
oslo.messaging==5.29.0
oslo.middleware==3.31.0
oslo.serialization==2.18.0
oslo.service==1.24.0
oslo.utils==4.7.0
oslotest==3.2.0
Paste==2.0.2
PasteDeploy==1.5.0
pbr==2.0.0
pika==0.10.0
pika-pool==0.1.3
prettytable==0.7.2
pyinotify==0.9.6
pyparsing==2.1.0
python-dateutil==2.5.3
python-mimeparse==1.6.0
python-subunit==1.0.0
pytz==2013.6
PyYAML==3.13
repoze.lru==0.7
requests==2.14.2
requestsexceptions==1.2.0
rfc3986==0.3.1
Routes==2.3.1
six==1.10.0
smmap==0.9.0
statsd==3.2.1
stestr==2.0.0
stevedore==1.20.0
tenacity==3.2.1
testtools==2.2.0
traceback2==1.4.0
unittest2==1.1.0
vine==1.1.4
WebOb==1.7.1
wrapt==1.7.0