[sos-devel] [PATCH] detect FIPS mode and switch to sha256sum

Bryn M. Reeves bmr at redhat.com
Wed Apr 6 10:16:02 UTC 2011


Hi Folks,

This resolves:

https://bugzilla.redhat.com/show_bug.cgi?id=689387

When operating in FIPS mode the md5 digest algorithm is forbidden and will cause
an exception when generating the report checksum. Detect FIPS mode via
/proc/sys/crypto/fips_enabled and switch to sha256.

In future we should expose this as a command line / configuration file option
(and factor out fipsModeEnabled() as a general routine).

Regards,
Bryn.

-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: sos-bz689387-use-sha256-in-fips-mode.patch
URL: <http://listman.redhat.com/archives/sos-devel/attachments/20110406/8752869f/attachment.ksh>


More information about the sos-devel mailing list