Re: Error while working in `FID` enabled systems

--===============3320713193429340022==
Content-Type: multipart/alternative; boundary="0000000000000820f3062faf3b2b"

--0000000000000820f3062faf3b2b
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

Hi Andy,

Thanks for getting back quickly. Appreciate it a lot. We are using the open
source version, so I guess we will have to wait for patch to be applied
incase thats going in.

Regards,
Nithin

On Thu, 6 Mar, 2025, 8:57=E2=80=AFpm Andy Robinson, <[email protected]> wr=
ote:

> Hi Nithin,
>
> I wasn't aware of `usedforsecurity` to silence warnings, so thanks for th=
e
> tip.  We'll discuss and could potentially include it in a future release.
>
> If you're working for a commercial enterprise and need a fix or build
> ASAP, please email [email protected] and we can discuss outside of
> the user group.
>
> Best Regards
>
> Andy Robinson
>
>
>
> On Thu, 6 Mar 2025 at 15:00, Nithin M S via reportlab-users <
> [email protected]> wrote:
>
>> Hi All,
>>
>> While working on `Federal Information Processing Standard (FIPS)` enable=
d
>> systems like `RHEL`, getting the following error:
>> ```
>>   File
>> "./vu_commons/reports/datasource/dashboards/dashboard_data_source.py", l=
ine
>> 776, in add_reports_footer
>>   File
>> "/opt/app-root/lib64/python3.11/site-packages/reportlab/pdfgen/canvas.py=
",
>> line 305, in __init__
>>     self._doc =3D pdfdoc.PDFDocument(compression=3DpageCompression,
>>                 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
>>   File
>> "/opt/app-root/lib64/python3.11/site-packages/reportlab/pdfbase/pdfdoc.p=
y",
>> line 137, in __init__
>>     sig =3D self.signature =3D md5()
>>                            ^^^^^
>> _hashlib.UnsupportedDigestmodError: [digital envelope routines]
>> unsupported
>> ```
>>
>> I understand that this is an error from the `hashlib` library indicating
>> that the `md5` algorithm is not a safer algorithm.
>> There seems to be a work around for this by using something like
>> `md5(..., usedforsecurity=3DFalse)`.
>>
>> Now, my question is whether it makes sense to implement `userforsecurity=
`
>> in reportlab or a different algorithm altogether to be safer from securi=
ty
>> compliances.
>>
>> Thanks
>>
>> Regards,
>> Nithin
>> _______________________________________________
>> reportlab-users mailing list
>> [email protected]
>> https://pairlist2.pair.net/mailman/listinfo/reportlab-users
>>
>
>
> --
> Andy Robinson
> Managing Director, ReportLab
>
>

--0000000000000820f3062faf3b2b
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"auto"><div><span class=3D"smart_draft_text">Hi Andy,<br><br>Tha=
nks for getting back quickly. Appreciate it a lot. We are using the open so=
urce version, so I guess we will have to wait for patch to be applied incas=
e thats going in.<br><br>Regards,<br>Nithin</span><br><br><div class=3D"gma=
il_quote gmail_quote_container"><div dir=3D"ltr" class=3D"gmail_attr">On Th=
u, 6 Mar, 2025, 8:57=E2=80=AFpm Andy Robinson, &lt;<a href=3D"mailto:andy@r=
eportlab.com">[email protected]</a>&gt; wrote:<br></div><blockquote class=
=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padd=
ing-left:1ex"><div dir=3D"ltr">Hi Nithin,<div><br></div><div>I wasn&#39;t a=
ware of `usedforsecurity` to silence warnings, so thanks for the tip.=C2=A0=
 We&#39;ll discuss and could potentially include it in a future release.</d=
iv><div><br></div><div>If you&#39;re working for a commercial enterprise an=
d need a fix or build ASAP, please email <a href=3D"mailto:enquiries@report=
lab.com" target=3D"_blank" rel=3D"noreferrer">[email protected]</a> a=
nd we can discuss outside of the user group.</div><div><br></div><div>Best =
Regards</div><div><br></div><div>Andy Robinson<br><div><br></div><div><br><=
/div></div></div><br><div class=3D"gmail_quote"><div dir=3D"ltr" class=3D"g=
mail_attr">On Thu, 6 Mar 2025 at 15:00, Nithin M S via reportlab-users &lt;=
<a href=3D"mailto:[email protected]" target=3D"_blank" r=
el=3D"noreferrer">[email protected]</a>&gt; wrote:<br></=
div><blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;bor=
der-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir=3D"ltr"><div=
 dir=3D"ltr">Hi All,<div><br></div><div>While working on `Federal Informati=
on Processing Standard (FIPS)` enabled systems like `RHEL`, getting the fol=
lowing error:<br></div><div>```</div><div>=C2=A0 File &quot;./vu_commons/re=
ports/datasource/dashboards/dashboard_data_source.py&quot;, line 776, in ad=
d_reports_footer<br>=C2=A0 File &quot;/opt/app-root/lib64/python3.11/site-p=
ackages/reportlab/pdfgen/canvas.py&quot;, line 305, in __init__<br>=C2=A0 =
=C2=A0 self._doc =3D pdfdoc.PDFDocument(compression=3DpageCompression,<br>=
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 ^^^^^^^^^^^^^^^^^^^=
^^^^^^^^^^^^^^^^^^^^^^^^^^^^<br>=C2=A0 File &quot;/opt/app-root/lib64/pytho=
n3.11/site-packages/reportlab/pdfbase/pdfdoc.py&quot;, line 137, in __init_=
_<br>=C2=A0 =C2=A0 sig =3D self.signature =3D md5()<br>=C2=A0 =C2=A0 =C2=A0=
 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0^^^^^<br>_hashlib.UnsupportedDigestmodError: [digital envelope routines]=
 unsupported<br></div><div>```</div><div><br></div><div>I understand that t=
his is an error from the `hashlib` library indicating that the `md5` algori=
thm is not a safer algorithm.</div><div>There seems to be a work around for=
 this by using something like `md5(..., usedforsecurity=3DFalse)`.</div><di=
v><br></div><div>Now, my question is whether it makes sense to implement `u=
serforsecurity` in reportlab or a different algorithm=C2=A0altogether to be=
 safer from security compliances.</div><div><br></div><div>Thanks</div><div=
><br></div><div>Regards,</div><div>Nithin</div></div>
</div>
_______________________________________________<br>
reportlab-users mailing list<br>
<a href=3D"mailto:[email protected]" target=3D"_blank" r=
el=3D"noreferrer">[email protected]</a><br>
<a href=3D"https://pairlist2.pair.net/mailman/listinfo/reportlab-users" rel=
=3D"noreferrer noreferrer" target=3D"_blank">https://pairlist2.pair.net/mai=
lman/listinfo/reportlab-users</a><br>
</blockquote></div><div><br clear=3D"all"></div><div><br></div><span class=
=3D"gmail_signature_prefix">-- </span><br><div dir=3D"ltr" class=3D"gmail_s=
ignature"><div dir=3D"ltr">Andy Robinson<br>Managing Director, ReportLab<br=
><br></div></div>
</blockquote></div></div></div>

--0000000000000820f3062faf3b2b--

--===============3320713193429340022==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline