Hard coded MD5 hashing algorithm prevents FIPS compliance
@soltysh is already working on this.
Since Aug 31, 2016.
- Dominant language
- Go
- Stars
- 8.7k
- Forks
- 4.8k
- Avg merge
- 4d 10h
- Merged PRs (30d)
- 53
Description
[provide a description of the issue]
Files such as:
https://github.com/openshift/origin/blob/388478c40e751c4295dcb9a44dd69e5ac65d0e3b/pkg/auth/authenticator/password/htpasswd/md5.go
Rely on hard coded MD5 hashing algorithms. This results in systems that are FIPS enabled to cause runtime errors. By removing the hard coded MD5 and replacing it with SHA-2 (or any FIPS compliant hashing algorithm) systems requiring FIPS support can run OpenShift.
Version
[provide output of the openshift version or oc version command]
master branch
Steps To Reproduce
- [step 1]
- [step 2]
Current Result
Expected Result
Additional Information
[try to run $ oadm diagnostics command if possible]
[if you are reporting issue related to builds, provide build logs with BUILD_LOGLEVEL=5]
[consider attaching output of the $ oc get all -o json -n <namespace> command to the issue]
[visit https://docs.openshift.org/latest/welcome/index.html]
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.