]> code.ossystems Code Review - openembedded-core.git/commit
insane.bbclass: Update insane.bbclass to work on FIPS enabled hosts
authorMark Hatle <mark.hatle@kernel.crashing.org>
Tue, 1 Mar 2022 01:37:26 +0000 (19:37 -0600)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Tue, 1 Mar 2022 23:44:29 +0000 (23:44 +0000)
commit7f7eb82ce47ede6ec6f50cbcb56cbfbe10e8d20c
tree80b44dee82ca625f3c872ee9589447e08fc56f24
parent165759dced7fbe73b1db2ede67047896071dc6d0
insane.bbclass: Update insane.bbclass to work on FIPS enabled hosts

hashlib.md5() is not permitted on a FIPS enabled host system.  This is due
to md5 not being an approved hash algorithm.

Instead use:
 hashlib.new('MD5', usedforsecurity=False)

This is allowed, as it's clear the hash is used for a non-security purpose.

Using an md5 to identify when a license has changed is permitted, as we're
not using it for file integrity.

Signed-off-by: Mark Hatle <mark.hatle@xilinx.com>
Signed-off-by: Mark Hatle <mark.hatle@kernel.crashing.org>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
meta/classes/insane.bbclass