Actions
Story #5186
closed
As a user, I can run pulp 2 in FIPS mode without md5
Status:
CLOSED - WONTFIX
Priority:
Normal
Assignee:
-
Category:
-
Sprint/Milestone:
-
Start date:
Due date:
% Done:
0%
Estimated time:
Platform Release:
Groomed:
No
Sprint Candidate:
No
Tags:
Pulp 2
Sprint:
Quarter:
Description
Previously, we were using a flag in FIPS mode (usedforsecurity) that allowed us to use md5 in non-security contexts. This flag is removed in RHEL 8 so we need to be able to run pulp in FIPS mode with use of md5.
Related issues
Updated by daviddavis over 4 years ago
- Related to Story #5187: As a user, I can run pulp 2 with pulp_rpm in FIPS mode without md5 added
Updated by rchan over 4 years ago
Specifically, we utilized md5 to verify checksums for data integrity checks for content. We utilize other mechanisms to verify that security was not compromised on content, so usedforsecurity was useful to indicate that md5 was not being used for security related checks. However we will need to find an alternative way to run FIPS mode now that md5 will not be allowable.
Updated by daviddavis over 4 years ago
- Status changed from NEW to CLOSED - WONTFIX
Actions
.