Skip to content

[3.9] gh-109396: Fix test_socket.test_hmac_sha1() in FIPS mode (GH-109423) - #125107

Merged
ambv merged 3 commits into
python:3.9from
miss-islington:backport-f7bfac4-3.9
Nov 4, 2024
Merged

[3.9] gh-109396: Fix test_socket.test_hmac_sha1() in FIPS mode (GH-109423)#125107
ambv merged 3 commits into
python:3.9from
miss-islington:backport-f7bfac4-3.9

Conversation

@miss-islington

Copy link
Copy Markdown
Contributor

gh-109396: Fix test_socket.test_hmac_sha1() in FIPS mode (GH-109423)

Use a longer key: FIPS mode requires at least of at least 112 bits.
The previous key was only 32 bits.
(cherry picked from commit e091b9f)

(cherry picked from commit f7bfac4)

Co-authored-by: Miss Islington (bot) 31488909+miss-islington@users.noreply.github.com
Co-authored-by: Victor Stinner vstinner@python.org

…pythonGH-109423) (pythonGH-109427)
pythongh-109396: Fix test_socket.test_hmac_sha1() in FIPS mode (pythonGH-109423)
Use a longer key: FIPS mode requires at least of at least 112 bits.
The previous key was only 32 bits.
(cherry picked from commit e091b9f)
(cherry picked from commit f7bfac4)
Co-authored-by: Miss Islington (bot) <31488909+miss-islington@users.noreply.github.com>
Co-authored-by: Victor Stinner <vstinner@python.org>
@bedevere-appbedevere-appBot added tests Tests in the Lib/test dir awaiting review labels Oct 8, 2024
@encukou
encukou marked this pull request as draft October 8, 2024 12:48
@encukouencukou changed the title [3.9] [3.11] gh-109396: Fix test_socket.test_hmac_sha1() in FIPS mode (GH-109423) (GH-109427)[3.9] gh-109396: Fix test_socket.test_hmac_sha1() in FIPS mode (GH-109423)Oct 8, 2024
@encukou

Copy link
Copy Markdown
Member

!buildbot FIPS

@bedevere-bot

Copy link
Copy Markdown

🤖 New build scheduled with the buildbot fleet by @encukou for commit cbbf2b9 🤖

The command will test the builders whose names match following regular expression: FIPS

The builders matched are:

  • AMD64 CentOS9 FIPS Only Blake2 Builtin Hash PR
  • AMD64 RHEL8 FIPS Only Blake2 Builtin Hash PR
  • AMD64 RHEL8 FIPS No Builtin Hashes PR
  • AMD64 CentOS9 FIPS No Builtin Hashes PR

@encukou

Copy link
Copy Markdown
Member

Note that we care about Only Blake2 builds, which passed here.
The red No Builtin Hashes FIPS builds are unstable and never passed.

@encukou
encukou marked this pull request as ready for review October 10, 2024 14:30
@encukou

Copy link
Copy Markdown
Member

!buildbot FIPS No Builtin

@bedevere-bot

Copy link
Copy Markdown

🤖 New build scheduled with the buildbot fleet by @encukou for commit c8eeb4c 🤖

The command will test the builders whose names match following regular expression: FIPS No Builtin

The builders matched are:

  • AMD64 RHEL8 FIPS No Builtin Hashes PR
  • AMD64 CentOS9 FIPS No Builtin Hashes PR

@ambv
ambv merged commit 011fb84 into python:3.9Nov 4, 2024
gentoo-bot pushed a commit to gentoo/cpython that referenced this pull request Apr 9, 2025
…ythonGH-109423) (pythonGH-125107)
Use a longer key: FIPS mode requires at least of at least 112 bits.
The previous key was only 32 bits.
(cherry picked from commit e091b9f)
(cherry picked from commit f7bfac4)
Co-authored-by: Victor Stinner <vstinner@python.org>
Co-authored-by: Petr Viktorin <encukou@gmail.com>
@miss-islington
miss-islington deleted the backport-f7bfac4-3.9 branch January 2, 2026 18:57
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

testsTests in the Lib/test dir

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants

@miss-islington@encukou@bedevere-bot@ambv