diff --git a/CHANGES/7434.bugfix b/CHANGES/7434.bugfix new file mode 100644 index 00000000000..2e2b3cd3016 --- /dev/null +++ b/CHANGES/7434.bugfix @@ -0,0 +1 @@ +Added ``usedforsecurity=False`` to ``pulp_hashlib.new()`` so FIPS-disallowed algorithms used for content addressing no longer raise ``UnsupportedDigestmodError``. diff --git a/pulpcore/app/pulp_hashlib.py b/pulpcore/app/pulp_hashlib.py index 604709b4daa..3e40081e8d2 100644 --- a/pulpcore/app/pulp_hashlib.py +++ b/pulpcore/app/pulp_hashlib.py @@ -33,4 +33,5 @@ def new(name, *args, **kwargs): "setting" ).format(name) ) + kwargs.setdefault("usedforsecurity", False) return the_real_hashlib.new(name, *args, **kwargs)