Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

Appearance settings

FIPS Compliance #134

Copy link
Copy link
@Hack3rDan

Description

@Hack3rDan
Issue body actions

Describe the bug
I need to modify this tool to be FIPS compliant and I would love to contribute this back to the community. How would the contributors prefer I contribute to a FIPS compliant version of this app? Pull request, new branch, or create my own fork?

To Reproduce
Steps to reproduce the behavior:

  1. This library depends on the hashlib library and uses md5 as an available has. However, in a FIPS compliant environment, md5 is not available. This results in errors in other apps that depend on this library if this library does not load properly.

Expected behavior
Eliminate failures associated with running in FIPS compliant environments.

Screenshots
N/A

Desktop (please complete the following information):

  • OS: RHEL 8
  • In this context I am running in a Splunk SOAR App. (DomainTool Iris Investigate)

Additional context
The Iris Investigate app is failing to load because it is not FIPS compliant. Based on what I could see it appears to come down to the fact that this library is packaged within that app and depends on a non-FIPS compliant algorithm (MD5). I would like to contribute a FIPS compliant version back to the community, but would like to follow the guidance from the contributors for this project before doing so.

Reactions are currently unavailable

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions

      Morty Proxy This is a proxified and sanitized view of the page, visit original site.