From: Mark Kogan <mkogan@redhat.com>
Date: Thu, 16 Jun 2022 10:41:17 +0000 (+0300)
Subject: pacific rgw: on FIPS enabled, fix segfault performing s3 multipart PUT
X-Git-Tag: v16.2.11~461^2
X-Git-Url: http://git-server-git.apps.pok.os.sepia.ceph.com/?a=commitdiff_plain;h=13c3028a705ec1e7931b35cdc1fd436f56541851;p=ceph.git

pacific rgw: on FIPS enabled, fix segfault performing s3 multipart PUT

Fixes: https://tracker.ceph.com/issues/56073

Signed-off-by: Mark Kogan <mkogan@redhat.com>
---

diff --git a/src/rgw/rgw_op.cc b/src/rgw/rgw_op.cc
index 2596c60c415..1b844fa5ec8 100644
--- a/src/rgw/rgw_op.cc
+++ b/src/rgw/rgw_op.cc
@@ -6453,6 +6453,8 @@ bool RGWCompleteMultipart::check_previously_completed(const DoutPrefixProvider*
   string oetag = sattrs[RGW_ATTR_ETAG].to_str();
 
   MD5 hash;
+  // Allow use of MD5 digest in FIPS mode for non-cryptographic purposes
+  hash.SetFlags(EVP_MD_CTX_FLAG_NON_FIPS_ALLOW);
   for (const auto& [index, part] : parts->parts) {
     std::string partetag = rgw_string_unquote(part);
     char petag[CEPH_CRYPTO_MD5_DIGESTSIZE];