56860ccae7
md5 is not an approved algorithm in FIPS mode, and trying to instantiate a hashlib.md5() will fail when the system is running in FIPS mode. md5 is allowed when in a non-security context. There is a plan to add a keyword parameter (usedforsecurity) to hashlib.md5() to annotate whether or not the instance is being used in a security context. In the case where it is not, the instantiation of md5 will be allowed. See https://bugs.python.org/issue9216 for more details. Some downstream python versions already support this parameter. To support these versions, a new encapsulation of md5() has been added to oslo_utils. See https://review.opendev.org/#/c/750031/ This patch is to replace the instances of hashlib.md5() with this new encapsulation, adding an annotation indicating whether the usage is a security context or not. In this case, all hashlib.md5() invocations are to run tempest tests so this is not a security context. With this patch, we can run tempest tests from a FIPS enabled machine. Change-Id: Ib301466bb0a1996997c63599918fa96059a927bd |
||
|---|---|---|
| .. | ||
| api_schema | ||
| cli | ||
| cmd | ||
| common | ||
| services | ||
| __init__.py | ||
| auth.py | ||
| base.py | ||
| decorators.py | ||
| exceptions.py | ||