Skip to content

Commit 26e4748

Browse files
committed
(PUP-12047) Add logic to skip MD5 checksum method on a FIPS system
This commit adds logic in http_metadata.rb to skip MD5 related checksums when FIPS is enabled since MD5 is not supported on FIPS enabled systems.
1 parent 8047d1c commit 26e4748

File tree

1 file changed

+1
-0
lines changed

1 file changed

+1
-0
lines changed

lib/puppet/file_serving/http_metadata.rb

+1
Original file line numberDiff line numberDiff line change
@@ -51,6 +51,7 @@ def collect
5151
# Prefer the checksum_type from the indirector request options
5252
# but fall back to the alternative otherwise
5353
[@checksum_type, :sha256, :sha1, :md5, :mtime].each do |type|
54+
next if type == :md5 && Puppet::Util::Platform.fips_enabled?
5455
@checksum_type = type
5556
@checksum = @checksums[type]
5657
break if @checksum

0 commit comments

Comments
 (0)