c82ce37635
md5 is not an approved algorithm in FIPS mode, and trying to instantiate a hashlib.md5() will fail when the system is running in FIPS mode. md5 is allowed when in a non-security context. There is a plan to add a keyword parameter (usedforsecurity) to hashlib.md5() to annotate whether or not the instance is being used in a security context. In the case where it is not, the instantiation of md5 will be allowed. See https://bugs.python.org/issue9216 for more details. Some downstream python versions already support this parameter. To support these versions, a new encapsulation of md5() has been added to oslo_utils. See https://review.opendev.org/#/c/750031/ This patch is to replace the instances of hashlib.md5() with this new encapsulation, adding an annotation indicating whether the usage is a security context or not. The instances being replaced here appear to be used to provide representations for paths. There is in fact already a sha256 version of get_hash_str that is supposed to be used in security sensitive usages. With this change (and the related dependent changes), the unit and functional tests pass when run on a FIPS enabled system. Change-Id: If0ec11e7b7fcde4dacc57265c4dd77b0f536bfab Depends-On: https://review.opendev.org/#/c/756432 Depends-On: https://review.opendev.org/#/c/756153 Depends-On: https://review.opendev.org/#/c/760160
166 lines
2.8 KiB
Plaintext
166 lines
2.8 KiB
Plaintext
alembic==0.9.8
|
|
amqp==2.5.0
|
|
appdirs==1.4.3
|
|
asn1crypto==0.24.0
|
|
attrs==17.4.0
|
|
automaton==1.14.0
|
|
bandit==1.1.0
|
|
cachetools==2.0.1
|
|
castellan==0.16.0
|
|
cffi==1.14.0
|
|
cliff==2.11.0
|
|
cmd2==0.8.1
|
|
colorama==0.3.9
|
|
coverage==4.0
|
|
cryptography==2.7
|
|
cursive==0.2.1
|
|
dataclasses==0.7
|
|
ddt==1.2.1
|
|
debtcollector==1.19.0
|
|
decorator==4.1.0
|
|
deprecation==2.0
|
|
dogpile.cache==0.6.5
|
|
enum-compat==0.0.2
|
|
eventlet==0.22.0
|
|
extras==1.0.0
|
|
fasteners==0.14.1
|
|
fixtures==3.0.0
|
|
future==0.16.0
|
|
futurist==1.8.0
|
|
gabbi==1.35.0
|
|
gitdb2==2.0.3
|
|
GitPython==2.1.8
|
|
greenlet==0.4.15
|
|
idna==2.6
|
|
iso8601==0.1.11
|
|
Jinja2==2.10
|
|
jmespath==0.9.3
|
|
jsonpatch==1.21
|
|
jsonpath-rw==1.4.0
|
|
jsonpath-rw-ext==1.1.3
|
|
jsonpointer==2.0
|
|
jsonschema==3.2.0
|
|
keystoneauth1==3.16.0
|
|
keystonemiddleware==4.20.0
|
|
kombu==4.6.1
|
|
linecache2==1.0.0
|
|
lxml==4.5.0
|
|
Mako==1.0.7
|
|
MarkupSafe==1.1.1
|
|
microversion-parse==0.2.1
|
|
mock==3.0.0
|
|
msgpack==0.5.6
|
|
msgpack-python==0.5.6
|
|
munch==2.2.0
|
|
mypy==0.761
|
|
netaddr==0.7.18
|
|
netifaces==0.10.4
|
|
networkx==2.1.0
|
|
numpy==1.19.0
|
|
openstacksdk==0.35.0
|
|
os-brick==3.1.0
|
|
os-client-config==1.29.0
|
|
os-resource-classes==0.4.0
|
|
os-service-types==1.7.0
|
|
os-traits==2.4.0
|
|
os-vif==1.14.0
|
|
os-win==4.2.0
|
|
os-xenapi==0.3.4
|
|
osc-lib==1.10.0
|
|
oslo.cache==1.26.0
|
|
oslo.concurrency==3.29.0
|
|
oslo.config==6.8.0
|
|
oslo.context==2.22.0
|
|
oslo.db==4.44.0
|
|
oslo.i18n==3.15.3
|
|
oslo.log==3.36.0
|
|
oslo.messaging==10.3.0
|
|
oslo.middleware==3.31.0
|
|
oslo.policy==3.4.0
|
|
oslo.privsep==1.33.2
|
|
oslo.reports==1.18.0
|
|
oslo.rootwrap==5.8.0
|
|
oslo.serialization==2.21.1
|
|
oslo.service==1.40.1
|
|
oslo.upgradecheck==0.1.1
|
|
oslo.utils==4.7.0
|
|
oslo.versionedobjects==1.35.0
|
|
oslo.vmware==2.17.0
|
|
oslotest==3.8.0
|
|
osprofiler==1.4.0
|
|
ovs==2.10.0
|
|
ovsdbapp==0.15.0
|
|
packaging==17.1
|
|
paramiko==2.7.1
|
|
Paste==2.0.2
|
|
PasteDeploy==1.5.0
|
|
pbr==2.0.0
|
|
pluggy==0.6.0
|
|
ply==3.11
|
|
prettytable==0.7.1
|
|
psutil==3.2.2
|
|
psycopg2==2.8
|
|
py==1.5.2
|
|
pyasn1==0.4.2
|
|
pyasn1-modules==0.2.1
|
|
pycadf==2.7.0
|
|
pycparser==2.18
|
|
pyinotify==0.9.6
|
|
pyroute2==0.5.4
|
|
PyJWT==1.7.0
|
|
PyMySQL==0.8.0
|
|
pyOpenSSL==17.5.0
|
|
pyparsing==2.2.0
|
|
pyperclip==1.6.0
|
|
pypowervm==1.1.15
|
|
pytest==3.4.2
|
|
python-barbicanclient==4.5.2
|
|
python-cinderclient==3.3.0
|
|
python-dateutil==2.5.3
|
|
python-editor==1.0.3
|
|
python-glanceclient==2.8.0
|
|
python-ironicclient==3.0.0
|
|
python-keystoneclient==3.15.0
|
|
python-mimeparse==1.6.0
|
|
python-neutronclient==6.7.0
|
|
python-subunit==1.4.0
|
|
pytz==2018.3
|
|
PyYAML==3.13
|
|
repoze.lru==0.7
|
|
requests==2.23.0
|
|
requests-mock==1.2.0
|
|
requestsexceptions==1.4.0
|
|
retrying==1.3.3
|
|
rfc3986==1.2.0
|
|
Routes==2.3.1
|
|
simplejson==3.13.2
|
|
six==1.11.0
|
|
smmap2==2.0.3
|
|
sortedcontainers==2.1.0
|
|
SQLAlchemy==1.2.19
|
|
sqlalchemy-migrate==0.13.0
|
|
sqlparse==0.2.4
|
|
statsd==3.2.2
|
|
stestr==2.0.0
|
|
stevedore==1.20.0
|
|
suds-jurko==0.6
|
|
taskflow==3.8.0
|
|
Tempita==0.5.2
|
|
tenacity==6.0.0
|
|
testrepository==0.0.20
|
|
testresources==2.0.0
|
|
testscenarios==0.4
|
|
testtools==2.2.0
|
|
tooz==1.58.0
|
|
traceback2==1.4.0
|
|
unittest2==1.1.0
|
|
urllib3==1.22
|
|
vine==1.1.4
|
|
voluptuous==0.11.1
|
|
warlock==1.3.1
|
|
WebOb==1.8.2
|
|
websockify==0.9.0
|
|
wrapt==1.10.11
|
|
wsgi-intercept==1.7.0
|
|
zVMCloudConnector==1.3.0
|