[
https://issues.apache.org/jira/browse/KAFKA-20929?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Mickael Maison resolved KAFKA-20929.
------------------------------------
Fix Version/s: 4.5.0
Resolution: Fixed
> ConnectStandaloneFileTest fails on FIPS-enabled systems due to MD5 usage
> ------------------------------------------------------------------------
>
> Key: KAFKA-20929
> URL: https://issues.apache.org/jira/browse/KAFKA-20929
> Project: Kafka
> Issue Type: Test
> Reporter: Maros Orsak
> Assignee: Maros Orsak
> Priority: Major
> Fix For: 4.5.0
>
>
> validate_output in tests/kafkatest/tests/connect/connect_test.py uses md5sum
> and hashlib.md5 to verify file
> integrity. On FIPS 140-2/140-3 enabled systems, MD5 is blocked at the OS
> crypto
> layer, causing RemoteCommandError on the md5sum SSH call or ValueError:
> unsupported from hashlib.md5.
>
> Reproducer is simply to call:
> {code:java}
> python3 -c "import hashlib; hashlib.md5()"{code}
> which would end up in the
> {code:java}
> Traceback (most recent call last):
> File "<string>", line 1, in <module>
> ValueError: [digital envelope routines] unsupported{code}
> To solve this we should use _*hashlib.sha512* instead._
>
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
