Describe the bug
When running in a FIPS-enabled environment, deploy always calls Checksums.generate, which tries to compute MD5 and SHA1. These algorithms are disabled in FIPS, so it raises:
ValueError: [digital envelope routines: EVP_DigestInit_ex] disabled for FIPS
To Reproduce
Steps to reproduce the behavior:
- Run
deploy(...) inside a Python container with FIPS OpenSSL enabled
- See error when
Checksums.generate is invoked
Expected behavior
If checksum_enabled=False, checksum generation should be skipped entirely.
Screenshots
Work restricted - N/A
Environment:
- OS: Linux (GitLab EKS runner with FIPS-enabled OpenSSL)
- pyartifactory version: [2.10.0]
Additional context
Issue has been worked in a PR of mine (linked)
Describe the bug
When running in a FIPS-enabled environment,
deployalways callsChecksums.generate, which tries to compute MD5 and SHA1. These algorithms are disabled in FIPS, so it raises:ValueError: [digital envelope routines: EVP_DigestInit_ex] disabled for FIPSTo Reproduce
Steps to reproduce the behavior:
deploy(...)inside a Python container with FIPS OpenSSL enabledChecksums.generateis invokedExpected behavior
If
checksum_enabled=False, checksum generation should be skipped entirely.Screenshots
Work restricted - N/A
Environment:
Additional context
Issue has been worked in a PR of mine (linked)