openshift / openshift/origin

Hard coded MD5 hashing algorithm prevents FIPS compliance

Open
#9,045 9 comments 0 reactions 1 assignee View on GitHub

@soltysh is already working on this.

Since Aug 31, 2016.

component/auth lifecycle/frozen priority/P3
Dominant language
Go
Stars
8.7k
Forks
4.8k
Avg merge
4d 10h
Merged PRs (30d)
53

Description

[provide a description of the issue]
Files such as:
https://github.com/openshift/origin/blob/388478c40e751c4295dcb9a44dd69e5ac65d0e3b/pkg/auth/authenticator/password/htpasswd/md5.go

Rely on hard coded MD5 hashing algorithms. This results in systems that are FIPS enabled to cause runtime errors. By removing the hard coded MD5 and replacing it with SHA-2 (or any FIPS compliant hashing algorithm) systems requiring FIPS support can run OpenShift.

Version

[provide output of the openshift version or oc version command]
master branch

Steps To Reproduce
  1. [step 1]
  2. [step 2]
Current Result
Expected Result
Additional Information

[try to run $ oadm diagnostics command if possible]
[if you are reporting issue related to builds, provide build logs with BUILD_LOGLEVEL=5]
[consider attaching output of the $ oc get all -o json -n <namespace> command to the issue]
[visit https://docs.openshift.org/latest/welcome/index.html]

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.