[openstack-dev] Fwd: Re: [requirements][kolla][security] pycrypto vs cryptography

Jeremy Stanley fungi at yuggoth.org
Fri Nov 18 15:04:52 UTC 2016


On 2016-11-18 14:38:22 +0000 (+0000), Luke Hinds wrote:
[...]
> I proposed raising bugs on launchpad for each instance discovered, so that
> if anything, we at least have an idea of the extent of work needed to reach
> the needed level of compliance for FIPS 140-2.
[...]

It's come up plenty over the years and I think a lot of the easier
cases have already been fixed. Places where you'll have more trouble
are the ones like https://launchpad.net/bugs/1348339 (inherited from
Swift's use of MD5 for etags).
-- 
Jeremy Stanley



More information about the OpenStack-dev mailing list