Project

Profile

Help

Actions
Send by e-mail Copy link

Task #7853

closed

Task #7960: FIPS and support for ALLOWED_CONTENT_CHECKSUMS

FIPS: downloader needs to notice if expected-digest-algorithm is FORBIDDEN

Added by ggainey over 3 years ago. Updated about 3 years ago.

Status:
CLOSED - WONTFIX
Priority:
Normal
Assignee:
daviddavis
Category:
-
Sprint/Milestone:
3.12.0
Start date:
Due date:
% Done:

0%

Estimated time:
Platform Release:
Groomed:
No
Sprint Candidate:
No
Tags:
Sprint:
Quarter:

Description

See https://github.com/pulp/pulpcore/blob/master/pulpcore/app/models/repository.py#L302

If a RemoteArtifact has a digest-algorithm specified that is NOT in Artifact.DIGEST_FIELDS, current behavior is to ignore it and just build the rest of the digests. We need instead to notice an empty expected_digests, check for specified-algorithms in Artifact.FORBIDDEN_DIGESTS, and raise an exception when that happens.

See https://hackmd.io/d5y1IaW_QaSJ-DsosMDkjg?view for more discussion.

Actions
Copy link
 #1

Updated by fao89 over 3 years ago

  • Tracker changed from Issue to Task
  • % Done set to 0
  • Severity deleted (2. Medium)
  • Triaged deleted (No)
Actions
Copy link
 #2

Updated by ppicka over 3 years ago

  • Status changed from NEW to ASSIGNED
  • Assignee set to ppicka
Actions
Copy link
 #3

Updated by daviddavis over 3 years ago

  • Parent issue set to #7960
Actions
Copy link
 #4

Updated by pulpbot over 3 years ago

  • Status changed from ASSIGNED to POST

edit: accidentally tagged wrong issue

Actions
Copy link
 #5

Updated by dalley over 3 years ago

  • Status changed from POST to ASSIGNED
Actions
Copy link
 #6

Updated by daviddavis about 3 years ago

  • Sprint/Milestone set to 3.11.0
Actions
Copy link
 #7

Updated by daviddavis about 3 years ago

  • Assignee changed from ppicka to daviddavis
Actions
Copy link
 #8

Updated by daviddavis about 3 years ago

  • Sprint/Milestone changed from 3.11.0 to 3.12.0
Actions
Copy link
 #9

Updated by daviddavis about 3 years ago

  • Status changed from ASSIGNED to NEW
  • Assignee deleted (daviddavis)
Actions
Copy link
 #10

Updated by daviddavis about 3 years ago

  • Status changed from NEW to ASSIGNED
  • Assignee set to daviddavis
Actions
Copy link
 #11

Updated by pulpbot about 3 years ago

  • Status changed from ASSIGNED to POST
Actions
Copy link
 #12

Updated by daviddavis about 3 years ago

Closing in favor of #8435

Actions
Copy link
 #13

Updated by daviddavis about 3 years ago

  • Status changed from POST to CLOSED - WONTFIX
Actions
Send by e-mail Copy link

Also available in: Atom PDF