Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

support FIPS builds without SHA-1 #5460

Merged
merged 1 commit into from
Apr 7, 2024
Merged

support FIPS builds without SHA-1 #5460

merged 1 commit into from
Apr 7, 2024

Conversation

davidism
Copy link
Member

@davidism davidism commented Apr 7, 2024

hashlib.sha1 may not be available in some FIPS builds that go beyond what FIPS requires into what it recommends. Apparently some RedHat containers do this. We don't want to change the default, but now it is accessed lazily so that it fails at runtime rather than at import time. This way, the developer has time after importing to change the default before using.

fixes #5448

@davidism davidism added this to the 3.0.3 milestone Apr 7, 2024
@davidism davidism merged commit b739390 into 3.0.x Apr 7, 2024
13 checks passed
@davidism davidism deleted the fips-sha1 branch April 7, 2024 18:42
@github-actions github-actions bot locked as resolved and limited conversation to collaborators Apr 22, 2024
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant