Bug 977819

Summary:	python-twisted core failures in fips mode
Product:	Red Hat Enterprise Linux 7	Reporter:	Bohuslav "Slavek" Kabrda <bkabrda>
Component:	python-twisted-core	Assignee:	Python Maintainers <python-maint>
Status:	CLOSED WONTFIX	QA Contact:	qe-baseos-daemons
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	7.0	CC:	riehecky
Target Milestone:	rc
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2014-06-17 12:45:24 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	839624

Description Bohuslav "Slavek" Kabrda 2013-06-25 12:13:50 UTC

python-twisted-core experiences some failures in fips mode due to usage of md5:
- twisted/persisted/sob.py - md5 is used to create hash of password, this hash is then encrypted using AES
- twisted/internet/_sslverify.py - md5 is used to create signature of ssl certificate - this seems to be dangerous and should fail
- twisted/cred/credentials.py - md5 is used to "unique string that can be returned to us and verified" which seems dangerous to do, this should fail or be replaced by different hash function
- twisted/protocols/sip.py - this is obsolete implementation of the above and experiences the same problems
- twisted/spread/respond.py - md5 used for password hashing, should be replaced or left raising the error

Comment 3 Bohuslav "Slavek" Kabrda 2014-06-17 12:45:24 UTC

As per the original bug report, the mentioned functions should be failing in FIPS mode, so I'm closing this bug as wontfix.