oslo.versionedobjects/releasenotes/notes
Ade Lee 9f0f31eb8b Replace md5 with oslo version
md5 is not an approved algorithm in FIPS mode, and trying to
instantiate a hashlib.md5() will fail when the system is running in
FIPS mode.

md5 is allowed when in a non-security context.  There is a plan to
add a keyword parameter (usedforsecurity) to hashlib.md5() to annotate
whether or not the instance is being used in a security context.

In the case where it is not, the instantiation of md5 will be allowed.
See https://bugs.python.org/issue9216 for more details.

Some downstream python versions already support this parameter.  To
support these versions, a new encapsulation of md5() has been added to
oslo_utils.  See https://review.opendev.org/#/c/750031/

This patch is to replace the instances of hashlib.md5() with this new
encapsulation, adding an annotation indicating whether the usage is
a security context or not.

In this case, md5 is computed as one of the object hashes for the
purposes of object versioning.

Change-Id: Idf36897d690a20d23123950618643d0b9e085f6c
Depends-On: https://review.opendev.org/#/c/760160
2020-10-29 13:30:07 -04:00
..
add-reno-996dd44974d53238.yaml Add reno for release notes management 2016-11-03 14:43:46 +08:00
drop-python27-support-b3e377b0dcfa4f5c.yaml [ussuri][goal] Drop python 2.7 support and testing 2020-02-07 07:56:16 -08:00
update_md5_for_fips-e5a8f8f438ac81fb.yaml Replace md5 with oslo version 2020-10-29 13:30:07 -04:00