]> git-server-git.apps.pok.os.sepia.ceph.com Git - ceph.git/commitdiff
octopus rgw: on FIPS enabled, fix segfault performing s3 multipart PUT 46701/head
authorMark Kogan <mkogan@redhat.com>
Wed, 15 Jun 2022 17:02:43 +0000 (20:02 +0300)
committerMark Kogan <mkogan@redhat.com>
Wed, 15 Jun 2022 17:02:43 +0000 (20:02 +0300)
Fixes: https://tracker.ceph.com/issues/56068
Signed-off-by: Mark Kogan <mkogan@redhat.com>
src/rgw/rgw_op.cc

index ce6ebfba8e2adea255b8d222585347a2a7b39ef7..10187ab6461281db8a9a971d171a5e8144306cb4 100644 (file)
@@ -6345,6 +6345,8 @@ bool RGWCompleteMultipart::check_previously_completed(const DoutPrefixProvider*
   string oetag = sattrs[RGW_ATTR_ETAG].to_str();
 
   MD5 hash;
+  // Allow use of MD5 digest in FIPS mode for non-cryptographic purposes
+  hash.SetFlags(EVP_MD_CTX_FLAG_NON_FIPS_ALLOW);
   for (const auto& [index, part] : parts->parts) {
     std::string partetag = rgw_string_unquote(part);
     char petag[CEPH_CRYPTO_MD5_DIGESTSIZE];