Maros Orsak created KAFKA-20929:
-----------------------------------
Summary: ConnectStandaloneFileTest fails on FIPS-enabled systems
due to MD5 usage
Key: KAFKA-20929
URL: https://issues.apache.org/jira/browse/KAFKA-20929
Project: Kafka
Issue Type: Test
Reporter: Maros Orsak
validate_output in tests/kafkatest/tests/connect/connect_test.py uses md5sum
and hashlib.md5 to verify file
integrity. On FIPS 140-2/140-3 enabled systems, MD5 is blocked at the OS
crypto
layer, causing RemoteCommandError on the md5sum SSH call or ValueError:
unsupported from hashlib.md5.
Reproducer is simply to call:
{code:java}
python3 -c "import hashlib; hashlib.md5()"{code}
which would end up in the
{code:java}
Traceback (most recent call last):
File "<string>", line 1, in <module>
ValueError: [digital envelope routines] unsupported{code}
To solve this we should use _*hashlib.sha512* instead._
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
