diff options
| author | Artom Lifshitz <alifshit@redhat.com> | 2019-05-09 14:34:35 -0400 |
|---|---|---|
| committer | Artom Lifshitz <alifshit@redhat.com> | 2019-06-27 13:27:56 +0300 |
| commit | 92002c8046ea5f575bb8a7ed6f4e6a8a29fad22d (patch) | |
| tree | 924118aabd7bf123a77ac37d5a205d7f2b0780ca /novaclient/tests/unit/v2/test_shell.py | |
| parent | 94cde08c0e02da0c8d13fc6534cd5cebdfcd3c5f (diff) | |
| download | python-novaclient-92002c8046ea5f575bb8a7ed6f4e6a8a29fad22d.tar.gz | |
Use SHA256 instead of MD5 in completion cache
FIPS 140 are U.S. government computer security standards that specify
requirements for cryptography modules. MD5 is not FIPS compliant [1].
Previously, MD5 was used as the hash algorithm for the bash completion
cache. Hosts running in FIPS mode [2] block execution of the MD5 hash.
This makes python-novaclient unusable on FIPS-enabled machines. This
patch replaces MD5 with SHA256, which is FIPS compliant.
[1] https://csrc.nist.gov/projects/hash-functions
[2] https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/security_guide/chap-federal_standards_and_regulations
Change-Id: Ia8750bc27aa9a2cfafb6f4f49252f5bd81bc1a40
(cherry picked from commit 2595bac2294ce05e389eaab6636977963d5fc66c)
(cherry picked from commit e15cc789d9428cd03c2c5fbd6f5023522f2290cc)
Diffstat (limited to 'novaclient/tests/unit/v2/test_shell.py')
0 files changed, 0 insertions, 0 deletions