Bug 977702

Summary:	python-paste failures in fips mode
Product:	Red Hat Enterprise Linux 7	Reporter:	Bohuslav "Slavek" Kabrda <bkabrda>
Component:	python-paste	Assignee:	Python Maintainers <python-maint>
Status:	CLOSED WONTFIX	QA Contact:	BaseOS QE - Apps <qe-baseos-apps>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	7.0	CC:	riehecky
Target Milestone:	rc
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2014-06-17 12:48:01 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	839624

Description Bohuslav "Slavek" Kabrda 2013-06-25 07:39:15 UTC

python-paste code can fail in few places in fips code due to usage of md5:
- paste/auth/auth_tkt.py - confirming digest of auth ticket - imho this is ok to fail, since md5 is not entirely secure for this purpose
- paste/auth/digest.py - used for authentication purposes - again, seems to be ok to fail, since md5 shouldn't be used for secure authentication
- /paste/session.py - generating session id - again, this seems to be ok to fail, since generating session id should be super secure

Comment 3 Bohuslav "Slavek" Kabrda 2014-06-17 12:48:01 UTC

As per the original bug report, the mentioned functions should be failing in FIPS mode, so I'm closing this bug as wontfix.