[jira] [Created] (KAFKA-20929) ConnectStandaloneFileTest fails on FIPS-enabled systems due to MD5 usage

["Maros Orsak (Jira)" <ji...@apache.org>]

Maros Orsak created KAFKA-20929:
-----------------------------------

             Summary: ConnectStandaloneFileTest fails on FIPS-enabled systems due to MD5 usage
                 Key: KAFKA-20929
                 URL: https://issues.apache.org/jira/browse/KAFKA-20929
             Project: Kafka
          Issue Type: Test
            Reporter: Maros Orsak


validate_output in tests/kafkatest/tests/connect/connect_test.py uses md5sum and hashlib.md5 to verify file
  integrity. On FIPS 140-2/140-3 enabled systems, MD5 is blocked at the OS crypto
   layer, causing RemoteCommandError on the md5sum SSH call or ValueError: unsupported from hashlib.md5.

 

Reproducer is simply to call:
{code:java}
python3 -c "import hashlib; hashlib.md5()"{code}
which would end up in the 
{code:java}
Traceback (most recent call last):
  File "<string>", line 1, in <module>
ValueError: [digital envelope routines] unsupported{code}
To solve this we should use _*hashlib.sha512* instead._

 



--
This message was sent by Atlassian Jira
(v8.20.10#820010)