[jira] [Resolved] (KAFKA-20929) ConnectStandaloneFileTest fails on FIPS-enabled systems due to MD5 usage

["Mickael Maison (Jira)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/KAFKA-20929?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Mickael Maison resolved KAFKA-20929.
------------------------------------
    Fix Version/s: 4.5.0
       Resolution: Fixed

> ConnectStandaloneFileTest fails on FIPS-enabled systems due to MD5 usage
> ------------------------------------------------------------------------
>
>                 Key: KAFKA-20929
>                 URL: https://issues.apache.org/jira/browse/KAFKA-20929
>             Project: Kafka
>          Issue Type: Test
>            Reporter: Maros Orsak
>            Assignee: Maros Orsak
>            Priority: Major
>             Fix For: 4.5.0
>
>
> validate_output in tests/kafkatest/tests/connect/connect_test.py uses md5sum and hashlib.md5 to verify file
>   integrity. On FIPS 140-2/140-3 enabled systems, MD5 is blocked at the OS crypto
>    layer, causing RemoteCommandError on the md5sum SSH call or ValueError: unsupported from hashlib.md5.
>  
> Reproducer is simply to call:
> {code:java}
> python3 -c "import hashlib; hashlib.md5()"{code}
> which would end up in the 
> {code:java}
> Traceback (most recent call last):
>   File "<string>", line 1, in <module>
> ValueError: [digital envelope routines] unsupported{code}
> To solve this we should use _*hashlib.sha512* instead._
>  



--
This message was sent by Atlassian Jira
(v8.20.10#820010)