Nanonid commented on issue #1171: couchdb unable to run on FIPS enabled CentOS
URL: https://github.com/apache/couchdb/issues/1171#issuecomment-366031442
 
 
   It seems the best path is to reference an internal couchdb hash function 
which enables a message digest internal function via configuration.
   Since CouchDB is not using MD5 for authentication or authorization, it's not 
addressed by FIPS compliance requirements (AFAICT).
   The issues is merely the direct linking to the OpenSSL MD5 hash, which could 
be worked around and not move off of MD5 for the time being.
   
   Replacing the direct crypto:hash with a "digest" function which calls 
erlang:md5 perhaps based on compiler option would provide a work around for 
this situation without compatibility issues.
   

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


With regards,
Apache Git Services

Reply via email to