Bug 1430774

Summary: PIP Not Compatible With EL7 in FIPS mode
Product: [Fedora] Fedora EPEL Reporter: Thomas Jones <redhat>
Component: python-pipAssignee: Miro Hrončok <mhroncok>
Status: CLOSED ERRATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: high Docs Contact:
Priority: unspecified    
Version: epel7CC: bkabrda, donald, metherid, mhroncok, TicoTimo, torsava
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: python-pip-8.1.2-6.el7 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2018-04-19 16:17:55 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Thomas Jones 2017-03-09 15:13:08 UTC 
Description of problem:
Several of our programs require the use of `pip` to install or upgrade python modules. When using the `pip` in EPEL's python-pip package on FIPS-enabled systems, the repo that `pip` is configured to talk to does not work due to that repo's use of MD5-based hashes.

Note: I realize that this is essentially the same problem with the pip in the SCL repositories that I've also reported (see BZ#1430763).


Version-Release number of selected component (if applicable):
- RHEL 7.3.1611 or CentOS 7.3.1611
- python-pip-8.1.2-5

How reproducible:
Always

Steps to Reproduce:
1. Install generic RHEL 7.3.1611 OS
2. Do a `yum --enablerepo=epel  install python-pip`
3. Attempt to install/upgrade a pytong module via pip (e.g., `pip install --upgrade boto3`)

Actual results:
The pip install fails with an "Unsupported hash name md5 for package" error.

Expected results:
The pip install succeeds without errors

Additional info:
Comment 1 Miro Hrončok 2018-04-04 13:10:13 UTC 
https://src.fedoraproject.org/rpms/python-pip/pull-request/3
Comment 2 Fedora Update System 2018-04-04 17:46:40 UTC 
python-pip-8.1.2-6.el7 has been pushed to the Fedora EPEL 7 testing repository. If problems still persist, please make note of it in this bug report.
See https://fedoraproject.org/wiki/QA:Updates_Testing for
instructions on how to install test updates.
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-038dc1d139
Comment 3 Fedora Update System 2018-04-19 16:17:55 UTC 
python-pip-8.1.2-6.el7 has been pushed to the Fedora EPEL 7 stable repository. If problems still persist, please make note of it in this bug report.