Skip to content

Commit 4e09114

Browse files
committed
Drop sha1 from the FIPS digests for SLE 16
https://jira.suse.com/browse/PED-12198
1 parent 4911544 commit 4e09114

1 file changed

Lines changed: 5 additions & 1 deletion

File tree

bci_tester/fips.py

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -18,10 +18,11 @@
1818
# OpenSSL 3.x in Tumbleweed dropped those as they're beyond deprecated
1919
if OS_VERSION in ("15.3", "15.4", "15.5"):
2020
NONFIPS_DIGESTS += ("md4", "mdc2")
21+
elif OS_VERSION in ("16.0",):
22+
NONFIPS_DIGESTS += ("sha1",)
2123

2224
#: FIPS compliant openssl digests
2325
FIPS_DIGESTS: Tuple[str, ...] = (
24-
"sha1",
2526
"sha224",
2627
"sha256",
2728
"sha3-224",
@@ -36,6 +37,9 @@
3637
"shake256",
3738
)
3839

40+
if OS_VERSION not in ("16.0"):
41+
FIPS_DIGESTS += ("sha1",)
42+
3943
NULL_DIGESTS: Dict[str, str] = {
4044
"blake2b512": "786a02f742015903c6c6fd852552d272912f4740e15847618a86e217f71f5419d25e1031afee585313896444934eb04b903a685b1448b755d56f701afe9be2ce",
4145
"blake2s256": "69217a3079908094e11121d042354a7c1f55b6482ca1a51e1b250dfd1ed0eef9",

0 commit comments

Comments
 (0)