Skip to content

gh-127298: Refactor test_hashlib for better usedforsecurity & openssl fips mode env support. #127492

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
gpshead wants to merge 8 commits into
base: main
Choose a base branch
from
+98 −56
Open

gh-127298: Refactor test_hashlib for better usedforsecurity & openssl fips mode env support. #127492

Changes from 1 commit
Commits
Show all changes
8 commits
Select commit Hold shift + click to select a range
59d9a85
Refactor test_hashlib for better usedforsecurity & openssl fips mode …
gpshead Dec 1, 2024
bd46651
More hashlib robustness in strange "FIPS mode" environments.
gpshead Dec 1, 2024
29a2012
remove some obsolete comments
gpshead Dec 2, 2024
e2bf70c
remove debug print
gpshead Dec 2, 2024
3f69411
docs typo
gpshead Dec 2, 2024
2a5b7e8
remove unnecessary as in except statement,
gpshead Dec 2, 2024
a6a75d6
More details in NEWS
gpshead Dec 2, 2024
3f9ec82
news typo
gpshead Dec 2, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
More details in NEWS
  • Loading branch information
@gpshead
gpshead authored Dec 2, 2024
commit a6a75d6a611084e6f224f14cd033dc5b478ccfbd
7 changes: 6 additions & 1 deletion Misc/NEWS.d/next/Library/2024-12-02-04-08-22.gh-issue-127298.8cpkfk.rst
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,3 +1,8 @@
:mod:`hashlib` now avoids emitting a message to stderr when used in custom
build or system environment excluding any of our otherwise guaranteed
available hash functions.
available hash functions. The ``algorithms_available`` attribute is now
updated to exclude algorithms that are not actually available at import time,
even if they are considered guaranteed in normal Python builds. Use of
OpenSSL FIPS mode runtime configs and some combination of the build time
``--with(out)-built-hashlib-hashes`` configure option are examples of when
this could happen.