8000 Unable to use MinIO in a FIPS environment · Issue #1402 · minio/minio-js · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content
< 8000 div class="d-flex flex-column flex-md-row flex-items-start flex-md-items-center">

Unable to use MinIO in a FIPS environment #1402

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Closed
digitalkristurner opened this issue Apr 22, 2025 · 2 comments
Closed

Unable to use MinIO in a FIPS environment #1402

digitalkristurner opened this issue Apr 22, 2025 · 2 comments

Comments

@digitalkristurner
Copy link

I have been trying to use the MinIO javascript package in a FIPS environment. It's currently failing with the following error which I believe is due to its use of MD5 hashes.

{"code":"ERR_OSSL_EVP_UNSUPPORTED","library":"digital envelope routines","opensslErrorStack":["error:03000086:digital envelope routines::initialization error","error:0308010C:digital envelope routines::unsupported"],"reason":"unsupported"}

I believe if SHA256 is enabled, the MD5 hash should not be generated. This would allow Minio to function in a FIPS environment with a simple tweak.

https://github.com/minio/minio-js/blob/6a821b543ef88f3615bae1c18db7cd49b4dde884/src/internal/client.ts#L1677C2-L1706C1

minio-js/src/internal/helper.ts

Line 31 in 6a821b5

export function hashBinary(buf: Buffer, enableSHA256: boolean) {

@harshavardhana
Copy link
Member

AWS S3 doesn't work without MD5 - we can't randomly turn it off.

@digitalkristurner
Copy link
Author

You don't seem to use the MD5 hash in the upload code if SHA256 is enabled?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@harshavardhana @digitalkristurner
0