Project

Profile

Help

Story #5186

closed

As a user, I can run pulp 2 in FIPS mode without md5

Added by daviddavis over 3 years ago. Updated over 3 years ago.

Status:
CLOSED - WONTFIX
Priority:
Normal
Assignee:
-
Category:
-
Sprint/Milestone:
-
Start date:
Due date:
% Done:

0%

Estimated time:
Platform Release:
Groomed:
No
Sprint Candidate:
No
Tags:
Pulp 2
Sprint:
Quarter:

Description

Previously, we were using a flag in FIPS mode (usedforsecurity) that allowed us to use md5 in non-security contexts. This flag is removed in RHEL 8 so we need to be able to run pulp in FIPS mode with use of md5.


Related issues

Related to RPM Support - Story #5187: As a user, I can run pulp 2 with pulp_rpm in FIPS mode without md5CLOSED - WONTFIX

Actions
Actions #1

Updated by daviddavis over 3 years ago

  • Related to Story #5187: As a user, I can run pulp 2 with pulp_rpm in FIPS mode without md5 added
Actions #2

Updated by rchan over 3 years ago

Specifically, we utilized md5 to verify checksums for data integrity checks for content. We utilize other mechanisms to verify that security was not compromised on content, so usedforsecurity was useful to indicate that md5 was not being used for security related checks. However we will need to find an alternative way to run FIPS mode now that md5 will not be allowable.

Actions #3

Updated by daviddavis over 3 years ago

  • Status changed from NEW to CLOSED - WONTFIX

Also available in: Atom PDF