Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Switch hash from MD5 to SHA256 #785

Merged
merged 1 commit into from
Jun 27, 2022
Merged

Conversation

stanhu
Copy link
Contributor

@stanhu stanhu commented May 3, 2022

On FIPS-compliant systems (http://en.wikipedia.org/wiki/FIPS_140), MD5
cannot be used. Switch to SHA256 instead.

However, this change does not keep backward compatibility with systems
with already-installed Thor recipes.

Closes #287

On FIPS-compliant systems (http://en.wikipedia.org/wiki/FIPS_140), MD5
cannot be used. Switch to SHA256 instead.

However, this change does not keep backward compatibility with systems
with already-installed Thor recipes.

Closes rails#287
@stanhu stanhu mentioned this pull request May 3, 2022
@stanhu
Copy link
Contributor Author

stanhu commented May 3, 2022

Some tests will be fixed by #771.

@dorner
Copy link

dorner commented May 4, 2022

Yeah I'm not sure this is actually a backwards compatibility issue. Looks like it just affects what filename Thor uses to save its config? Looks like it'll just save with the new filename if it can't find the old one. I'm OK with this @rafaelfranca

@stanhu
Copy link
Contributor Author

stanhu commented Jun 27, 2022

@rafaelfranca Would you mind reviewing here? We'd like to drop uses of MD5 in our code base ASAP.

@rafaelfranca rafaelfranca merged commit 937c443 into rails:main Jun 27, 2022
@stanhu
Copy link
Contributor Author

stanhu commented Jun 29, 2022

@rafaelfranca Could I trouble you to release a new version with this? Thanks so much.

@stanhu stanhu deleted the sh-fips-hash branch June 29, 2022 04:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

FIPS compatibility
3 participants