tree e2cc247593cb3550d4d3934e51032ee3e165174c
parent 35bc9bef6a23cc8f10f1b5838e3ca99133a3b8f6
author Ade Lee <alee@redhat.com> 1614285902 -0500
committer Ade Lee <alee@redhat.com> 1614287648 -0500

Replace md5 with oslo version

md5 is not an approved algorithm in FIPS mode, and trying to
instantiate a hashlib.md5() will fail when the system is running in
FIPS mode.

md5 is allowed when in a non-security context.  There is a plan to
add a keyword parameter (usedforsecurity) to hashlib.md5() to annotate
whether or not the instance is being used in a security context.

In the case where it is not, the instantiation of md5 will be allowed.
See https://bugs.python.org/issue9216 for more details.

Some downstream python versions already support this parameter.  To
support these versions, a new encapsulation of md5() has been added to
oslo_utils.  See https://review.opendev.org/#/c/750031/

This patch is to replace the instances of hashlib.md5() with this new
encapsulation, adding an annotation indicating whether the usage is
a security context or not.

In this case, all hashlib.md5() invocations are to run tempest tests
so this is not a security context.  With this patch, we can run tempest
tests from a FIPS enabled machine.

Change-Id: Ib301466bb0a1996997c63599918fa96059a927bd