You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@couchdb.apache.org by ro...@apache.org on 2022/05/27 11:37:30 UTC

[couchdb-glazier] branch main updated: Fix FIPS compliance in CouchIniAction.cs

This is an automated email from the ASF dual-hosted git repository.

ronny pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/couchdb-glazier.git


The following commit(s) were added to refs/heads/main by this push:
     new 6018889  Fix FIPS compliance in CouchIniAction.cs
     new 31814ba  Merge pull request #16 from tadgerb/patch-1
6018889 is described below

commit 60188893b9036d1a780c8a2934498c3926b054f5
Author: tadgerb <ta...@users.noreply.github.com>
AuthorDate: Tue May 24 10:52:42 2022 +0100

    Fix FIPS compliance in CouchIniAction.cs
    
    CouchIniAction.cs used the non-FIPS compliant managed SHA256 implementation, which caused an exception to be thrown during uninstall. This change replaces that call with the FIPS compliant SHA256CryptoServiceProvider.
---
 installer/CustomAction/CouchIniAction.cs | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/installer/CustomAction/CouchIniAction.cs b/installer/CustomAction/CouchIniAction.cs
index 4a82e3f..eeeb870 100644
--- a/installer/CustomAction/CouchIniAction.cs
+++ b/installer/CustomAction/CouchIniAction.cs
@@ -187,7 +187,7 @@ namespace CustomAction
         {
             using (FileStream stream = File.OpenRead(file))
             {
-                SHA256Managed sha = new SHA256Managed();
+                SHA256CryptoServiceProvider sha = new SHA256CryptoServiceProvider();
                 byte[] checksum = sha.ComputeHash(stream);
                 return BitConverter.ToString(checksum).Replace("-", String.Empty);
             }