Uploaded image for project: 'Puppet'
  1. Puppet
  2. PUP-9909

Use file_sha256 to verify module tarballs

    XMLWordPrintable

Details

    • Improvement
    • Status: Resolved
    • Normal
    • Resolution: Fixed
    • None
    • PUP 6.8.0
    • None
    • Coremunity
    • Platform Core KANBAN
    • Enhancement
    • The `puppet module install` command will prefer SHA-256 when verifying the downloaded module tarball, but fallback to MD5 if necessary.
    • Needs Assessment

    Description

      The forge api recently added file_sha256 for module downloads, see FORGE-360. The PMT should prefer that digest always. If the digest is missing and fips is enabled, it should raise like it does now. If fips is not enabled, then it should fall back to md5.

      Attachments

        Issue Links

          blocks

          Task - A task that needs to be done. SERVER-2596 Re-enable tests using `puppet module` in FIPS mode

          • Low - Minor problems or easily worked around.
          • Accepted

          Activity

            People

              josh Josh Cooper
              josh Josh Cooper
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Zendesk Support