Re: Error while working in `FID` enabled systems

--===============8905098117110918568==
Content-Type: multipart/alternative; boundary="00000000000098c5d8062fae2608"

--00000000000098c5d8062fae2608
Content-Type: text/plain; charset="UTF-8"

Hi Nithin,

I wasn't aware of `usedforsecurity` to silence warnings, so thanks for the
tip.  We'll discuss and could potentially include it in a future release.

If you're working for a commercial enterprise and need a fix or build ASAP,
please email [email protected] and we can discuss outside of the user
group.

Best Regards

Andy Robinson



On Thu, 6 Mar 2025 at 15:00, Nithin M S via reportlab-users <
[email protected]> wrote:

> Hi All,
>
> While working on `Federal Information Processing Standard (FIPS)` enabled
> systems like `RHEL`, getting the following error:
> ```
>   File
> "./vu_commons/reports/datasource/dashboards/dashboard_data_source.py", line
> 776, in add_reports_footer
>   File
> "/opt/app-root/lib64/python3.11/site-packages/reportlab/pdfgen/canvas.py",
> line 305, in __init__
>     self._doc = pdfdoc.PDFDocument(compression=pageCompression,
>                 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
>   File
> "/opt/app-root/lib64/python3.11/site-packages/reportlab/pdfbase/pdfdoc.py",
> line 137, in __init__
>     sig = self.signature = md5()
>                            ^^^^^
> _hashlib.UnsupportedDigestmodError: [digital envelope routines] unsupported
> ```
>
> I understand that this is an error from the `hashlib` library indicating
> that the `md5` algorithm is not a safer algorithm.
> There seems to be a work around for this by using something like `md5(...,
> usedforsecurity=False)`.
>
> Now, my question is whether it makes sense to implement `userforsecurity`
> in reportlab or a different algorithm altogether to be safer from security
> compliances.
>
> Thanks
>
> Regards,
> Nithin
> _______________________________________________
> reportlab-users mailing list
> [email protected]
> https://pairlist2.pair.net/mailman/listinfo/reportlab-users
>


-- 
Andy Robinson
Managing Director, ReportLab

--00000000000098c5d8062fae2608
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">Hi Nithin,<div><br></div><div>I wasn&#39;t aware of `usedf=
orsecurity` to silence warnings, so thanks for the tip.=C2=A0 We&#39;ll dis=
cuss and could potentially include it in a future release.</div><div><br></=
div><div>If you&#39;re working for a commercial enterprise and need a fix o=
r build ASAP, please email <a href=3D"mailto:[email protected]">enqui=
[email protected]</a> and we can discuss outside of the user group.</div><=
div><br></div><div>Best Regards</div><div><br></div><div>Andy Robinson<br><=
div><br></div><div><br></div></div></div><br><div class=3D"gmail_quote gmai=
l_quote_container"><div dir=3D"ltr" class=3D"gmail_attr">On Thu, 6 Mar 2025=
 at 15:00, Nithin M S via reportlab-users &lt;<a href=3D"mailto:reportlab-u=
[email protected]">[email protected]</a>&gt; wro=
te:<br></div><blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px =
0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir=3D"=
ltr"><div dir=3D"ltr">Hi All,<div><br></div><div>While working on `Federal =
Information Processing Standard (FIPS)` enabled systems like `RHEL`, gettin=
g the following error:<br></div><div>```</div><div>=C2=A0 File &quot;./vu_c=
ommons/reports/datasource/dashboards/dashboard_data_source.py&quot;, line 7=
76, in add_reports_footer<br>=C2=A0 File &quot;/opt/app-root/lib64/python3.=
11/site-packages/reportlab/pdfgen/canvas.py&quot;, line 305, in __init__<br=
>=C2=A0 =C2=A0 self._doc =3D pdfdoc.PDFDocument(compression=3DpageCompressi=
on,<br>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 ^^^^^^^^^^^^=
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^<br>=C2=A0 File &quot;/opt/app-root/lib6=
4/python3.11/site-packages/reportlab/pdfbase/pdfdoc.py&quot;, line 137, in =
__init__<br>=C2=A0 =C2=A0 sig =3D self.signature =3D md5()<br>=C2=A0 =C2=A0=
 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0^^^^^<br>_hashlib.UnsupportedDigestmodError: [digital envelope ro=
utines] unsupported<br></div><div>```</div><div><br></div><div>I understand=
 that this is an error from the `hashlib` library indicating that the `md5`=
 algorithm is not a safer algorithm.</div><div>There seems to be a work aro=
und for this by using something like `md5(..., usedforsecurity=3DFalse)`.</=
div><div><br></div><div>Now, my question is whether it makes sense to imple=
ment `userforsecurity` in reportlab or a different algorithm=C2=A0altogethe=
r to be safer from security compliances.</div><div><br></div><div>Thanks</d=
iv><div><br></div><div>Regards,</div><div>Nithin</div></div>
</div>
_______________________________________________<br>
reportlab-users mailing list<br>
<a href=3D"mailto:[email protected]" target=3D"_blank">r=
[email protected]</a><br>
<a href=3D"https://pairlist2.pair.net/mailman/listinfo/reportlab-users" rel=
=3D"noreferrer" target=3D"_blank">https://pairlist2.pair.net/mailman/listin=
fo/reportlab-users</a><br>
</blockquote></div><div><br clear=3D"all"></div><div><br></div><span class=
=3D"gmail_signature_prefix">-- </span><br><div dir=3D"ltr" class=3D"gmail_s=
ignature"><div dir=3D"ltr">Andy Robinson<br>Managing Director, ReportLab<br=
><br></div></div>

--00000000000098c5d8062fae2608--

--===============8905098117110918568==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline