NotificationsYou must be signed in to change notification settings
Fork32.2k
Star67.7k

[3.9] gh-118224: Load default OpenSSL provider for nonsecurity algorithms (GH-118236)#118264

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to ourterms of service andprivacy statement. We’ll occasionally send you account related emails.

Already on GitHub?Sign in to your account

Jump to bottom

Closed

xnox wants to merge1 commit intopython:3.9fromxnox:3.9-fix-nodefault-md5

Closed

[3.9] gh-118224: Load default OpenSSL provider for nonsecurity algorithms (GH-118236)#118264

xnox wants to merge1 commit intopython:3.9fromxnox:3.9-fix-nodefault-md5

Conversation

Copy link

xnox commentedApr 25, 2024•
edited by bedevere-appbot
Loading

When OpenSSL is configured to only load "base+fips" providers into the Null library context, md5 might not be available at all. In such cases currently CPython fallsback to internal hashlib implementation is there is one - as there might not be if one compiles python with --with-builtin-hashlib-hashes=blake2. With this change "default" provider is attempted to be loaded to access nonsecurity hashes.

Issue:Fallback md5 is used, when trying hard to only use OpenSSL #118224

[3.9]pythongh-118224: Load default OpenSSL provider for nonsecurity …

036e808

…algorithmsWhen OpenSSL is configured to only load "base+fips" providers into theNull library context, md5 might not be available at all. In such casescurrently CPython fallsback to internal hashlib implementation isthere is one - as there might not be if one compiles python with--with-builtin-hashlib-hashes=blake2. With this change "default"provider is attempted to be loaded to access nonsecurity hashes.