I'm running into an issue using Ansible and MD5 checksumming on a FIPS 
compliant CentOS KVM system (ValueError: error:060800A3:digital envelope 
routines:EVP_DigestInit_ex:disabled for fips).  Unfortunately 
FIPS-compliant systems/software typically disallow use of MD5 due to 
collision attack vulnerabilities.  Is it possible to add support for SHA256 
or SHA512 checksumming, and possibly make it the default option?  I'm happy 
to write up a GitHub Issue if needed.

-bw

-- 
You received this message because you are subscribed to the Google Groups 
"Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/ansible-project/021297ae-5f6b-4a58-a820-96ac134503c5%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to