Project

General

Profile

Actions
Copy link

Bug #26119

closed

puppet-certs uses md5 internally to check for difference between expected and actual certs (might break in FIPS)

Added by Ivan Necas almost 6 years ago. Updated over 5 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Ivan Necas
Category:
Foreman modules
Target version:
Foreman - 1.22.0
Difficulty:
Triaged:
No
Bugzilla link:
Pull request:
https://github.com/theforeman/puppet-certs/pull/246
Fixed in Releases:
Foreman - 1.21.1, Foreman - 1.22.0
Found in Releases:
Red Hat JIRA:

Description

There is 0 security implication of this issue and it doesn't break with puppet in FIPS either, as
by default, puppet is statically linked with their openssl distribution. We should however
not consciously use md5 and other non-FIPS compliant algorithms.

Actions
Copy link

Also available in: Atom PDF