+++ This bug was initially created as a clone of Bug #1064844 +++ PyMongo uses md5 hash for authentification and md5 is not safe to use while FIPS mode is on. Using PyMongo authentification will result in failures with FIPS mode. From pymongo/auth.py: try: import hashlib _MD5 = hashlib.md5 except ImportError: # for Python < 2.5 import md5 _MD5 = md5.new .... def __password_digest(username, password): .... md5hash = _MD5() data = "%s:mongo:%s" % (username, password) md5hash.update(data.encode('utf-8')) return unicode(md5hash.hexdigest()) I do not recommend to fix this issue, changing hash function to e.g sha256 may result into backward incompatible change.
This bug is here only for purpose of documenting missing FIPS functionality, but as mentioned in the original report, this won't be fixed.