Fix hashlib.md5 error with FIPS-compliant OpenSSL builds (#221)

LLNL · Jul 30, 2024 · 6d6fbe9 · 6d6fbe9
1 parent a8d032a
commit 6d6fbe9
Showing 1 changed file with 7 additions and 1 deletion.
diff --git a/surfactant/fileinfo.py b/surfactant/fileinfo.py
@@ -4,6 +4,7 @@
 # SPDX-License-Identifier: MIT
 import os
 import stat
+import sys
 from hashlib import md5, sha1, sha256
 
 
@@ -54,7 +55,12 @@ def calc_file_hashes(filename):
     """
     sha256_hash = sha256()
     sha1_hash = sha1()
-    md5_hash = md5()
+    # hashlib.md5 usedforsecurity flag was added in Python 3.9
+    if sys.version_info >= (3, 9):
+        # avoid error with FIPS-compliant OpenSSL library builds complaining about md5
+        md5_hash = md5(usedforsecurity=False)
+    else:
+        md5_hash = md5()
     b = bytearray(4096)
     mv = memoryview(b)
     try: