Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Fix #1469 Use a different checksum calculation method to run in FIPS env #1473

Merged
merged 1 commit into from
Nov 28, 2024
Merged

Fix #1469 Use a different checksum calculation method to run in FIPS env #1473

merged 1 commit into from
Nov 28, 2024

Commits on Nov 25, 2024

  1. Fix jschneier#1469 Use a different checksum calculation method to run… 

    … in FIPS env

Python 3.10 and later versions rely on OpenSSL 1.1.1 or newer, which includes FIPS-compliance checks.

MD5 is not an approved algorithm in FIPS mode, so attempting to instantiate self.blob.download_to_file(self._file) will fail when the system is running in FIPS mode.

The change configures the `download_to_file` function to use an alternative algorithm provided by gcloud storage SDK - 'crc32c' - for checksum calculation.
Configurable checksumming is available in the google-storage lib since v1.31.0, but pinning to >=1.32 for the retry import.
    @markesha
    markesha authored and markesha committed Nov 25, 2024
    Configuration menu
    Copy the full SHA
    ab961ba View commit details
    Browse the repository at this point in the history