Support for SHA256/SHA512 checksumming

Archives Ansible Project
1

I’m running into an issue using Ansible and MD5 checksumming on a FIPS compliant CentOS KVM system (ValueError: error:060800A3:digital envelope routines:EVP_DigestInit_ex:disabled for fips). Unfortunately FIPS-compliant systems/software typically disallow use of MD5 due to collision attack vulnerabilities. Is it possible to add support for SHA256 or SHA512 checksumming, and possibly make it the default option? I’m happy to write up a GitHub Issue if needed.

-bw

2

Basically referring to the logic to decide if a file needs to be transferred or not?

A GitHub issue doesn’t really do us a lot of good - Open Source is about itch scratching and the likelihood of someone else wanting to scratch your particular itch might be low - but a pull request would be interesting to see.

I’d probably expect to see something configurable in ansible.cfg