longslvr opened a new pull request, #31171: URL: https://github.com/apache/airflow/pull/31171
Add a configuration flag to disable the use of md5 for security in Python >= 3.9. If Python < 3.9 is being used, this flag will not provide any effect on the existing behaviour. This is mainly for backward compatibility suggested in: https://github.com/apache/airflow/discussions/25625 With this configuration combined with the newly introduced flag to change the caching hash method (introduced in: https://github.com/apache/airflow/pull/30675), airflow will be able to fun in FIPS enabled environment which would satisfy FIPS 140-2 requirements. Background: we have been running in FIPS enabled environment, in order to do that we would have to fork out Airflow and introduce all the changes so that Airflow is fully functional. That added extra complexity when upgrading Airflow to the latest version. Testing done: - run pre-commit - running unit tests with `Breeze` for the following Python versions: python 3.9, python 3.7 - Starting up airflow with `Breeze` and running the preloaded example dags in both Python 3.9 and Python 3.7 Thanks @vchiapaikeo for the work on the hashlib wrapper. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
