Add FIPS support to CodeChecker #4308
Labels
dependencies 📦
Pull requests that update a dependency file
dev env ⛑️
Development environment
python
Pull requests that update Python code (used by DependaBot)
refactoring 😡 ➡️ 🙂
Refactoring code.
usability 👍
Usability-related features
CodeChecker uses hashlib md5() in several areas. This causes problems on FIPS enabled systems, since MD5 is not supported in that mode.
The hashlib md5() signature was updated to include a workaround in Python 3.9. Implementing this workaround in CodeChecker should allow it to function on FIPS systems.
If changing how md5() is called is not feasible, then it may also be possible to use sha256(), which is FIPS compliant.
We are using CodeChecker for our CD/CI, which is transitioning to a FIPS platform. This will become a blocker for that process.
Update: Simply replacing 'md5' with 'sha256' seems to work, but I don't know if there are any unintended side effects.
The text was updated successfully, but these errors were encountered: