As a user, I can run pulp 2 in FIPS mode without md5
Previously, we were using a flag in FIPS mode (usedforsecurity) that allowed us to use md5 in non-security contexts. This flag is removed in RHEL 8 so we need to be able to run pulp in FIPS mode with use of md5.
Updated by rchan over 3 years ago
Specifically, we utilized md5 to verify checksums for data integrity checks for content. We utilize other mechanisms to verify that security was not compromised on content, so usedforsecurity was useful to indicate that md5 was not being used for security related checks. However we will need to find an alternative way to run FIPS mode now that md5 will not be allowable.