Skip to content

Commit 1f7c8ef

Browse files
committedJun 25, 2024·
(PUP-12047) Add logic to skip MD5 checksum method on a FIPS system
This commit adds logic in http_metadata.rb to skip MD5 related checksums when FIPS is enabled since MD5 is not supported on FIPS enabled systems.
1 parent 8047d1c commit 1f7c8ef

File tree

1 file changed

+2
-0
lines changed

1 file changed

+2
-0
lines changed
 

‎lib/puppet/file_serving/http_metadata.rb

+2
Original file line numberDiff line numberDiff line change
@@ -51,6 +51,8 @@ def collect
5151
# Prefer the checksum_type from the indirector request options
5252
# but fall back to the alternative otherwise
5353
[@checksum_type, :sha256, :sha1, :md5, :mtime].each do |type|
54+
next if type == :md5 && Puppet::Util::Platform.fips_enabled?
55+
5456
@checksum_type = type
5557
@checksum = @checksums[type]
5658
break if @checksum

0 commit comments

Comments
 (0)
Please sign in to comment.