Skip to content

Add support to avoid Checksum generation entirely #223

@tommycbird

Description

@tommycbird

Describe the bug

When running in a FIPS-enabled environment, deploy always calls Checksums.generate, which tries to compute MD5 and SHA1. These algorithms are disabled in FIPS, so it raises:

ValueError: [digital envelope routines: EVP_DigestInit_ex] disabled for FIPS

To Reproduce

Steps to reproduce the behavior:

  1. Run deploy(...) inside a Python container with FIPS OpenSSL enabled
  2. See error when Checksums.generate is invoked

Expected behavior

If checksum_enabled=False, checksum generation should be skipped entirely.

Screenshots

Work restricted - N/A

Environment:

  • OS: Linux (GitLab EKS runner with FIPS-enabled OpenSSL)
  • pyartifactory version: [2.10.0]

Additional context

Issue has been worked in a PR of mine (linked)

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't working

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions