René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"OpenSSL with FIPS enabled causes test_hashlib failures","articleBody":"# Bug report\n\n### Bug description:\n\nWe are using OpenSSL 3.3.1 with FIPS enabled. When compiling Python version 3.13.1 with --enable-optimizations, test_hashlib will fail with the following.\n\n```python\n...     fetching http://www.pythontest.net/hashlib/blake2b.txt ...\n..      fetching http://www.pythontest.net/hashlib/blake2s.txt ...\n.............ss.................        fetching http://www.pythontest.net/hashlib/sha3_224.txt ...\n..      fetching http://www.pythontest.net/hashlib/sha3_256.txt ...\n..      fetching http://www.pythontest.net/hashlib/sha3_384.txt ...\n..      fetching http://www.pythontest.net/hashlib/sha3_512.txt ...\n.....   fetching http://www.pythontest.net/hashlib/shake_128.txt ...\n.       fetching http://www.pythontest.net/hashlib/shake_256.txt ...\n.......................EE...E\n======================================================================\nERROR: test_usedforsecurity_false (__main__.HashLibTestCase.test_usedforsecurity_false)\n----------------------------------------------------------------------\nTraceback (most recent call last):\n  File \"/home/user/Python-3.13.1/Lib/test/test_hashlib.py\", line 246, in test_usedforsecurity_false\n    self._hashlib.new(\"md5\", usedforsecurity=False)\n    ~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^\n_hashlib.UnsupportedDigestmodError: [digital envelope routines] unsupported\n\n======================================================================\nERROR: test_usedforsecurity_true (__main__.HashLibTestCase.test_usedforsecurity_true)\n----------------------------------------------------------------------\nTraceback (most recent call last):\n  File \"/home/user/Python-3.13.1/Lib/test/test_hashlib.py\", line 235, in test_usedforsecurity_true\n    self._hashlib.new(\"md5\", usedforsecurity=True)\n    ~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^\n_hashlib.UnsupportedDigestmodError: [digital envelope routines] unsupported\n\n======================================================================\nERROR: test_scrypt (__main__.KDFTests.test_scrypt)\n----------------------------------------------------------------------\nTraceback (most recent call last):\n  File \"/home/user/Python-3.13.1/Lib/test/test_hashlib.py\", line 1122, in test_scrypt\n    result = hashlib.scrypt(password, salt=salt, n=n, r=r, p=p)\nValueError: [digital envelope routines] unsupported\n\n----------------------------------------------------------------------\nRan 78 tests in 24.957s\n\nFAILED (errors=3, skipped=2)\n```\nI believe there was a change with 3.12 where test failures no longer fail silently so it would make sense why our Python 3.11 build does not fail.\n\nI did some digging and I found the following PRs and issue which I believe pertain to what I am seeing:\n* https://github.com/python/cpython/pull/127301\n* https://github.com/python/cpython/pull/127492\n* https://github.com/python/cpython/issues/127298\n\n\n### CPython versions tested on:\n\n3.13\n\n### Operating systems tested on:\n\nLinux","author":{"url":"https://github.com/ghmj2417","@type":"Person","name":"ghmj2417"},"datePublished":"2024-12-18T16:01:45.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":10},"url":"https://github.com/128071/cpython/issues/128071"}