[Scons-users] [Non-DoD Source] Re: Feature Request: Add Support for detecting build changes via sha256

[RUHGE, RYAN L CTR USAF AFMC AFLCMC/HBAW-OL]

Mats,

Sorry not sure what happened there I will try sending my message again.

In short, our system is configured to run in FIPS mode (Federal Information Processing Standard).  In this mode, md5 is not an allowed cryptographic algorithm and SCons will not work at all if we don't patch it (unless we change it to check timestamps instead).  Our current patch makes SCons only work in sha256 mode which I fully understand is not desirable.  Once we get a chance we will rework the patch to make it an option and move forward from there to work with you all.

Thanks again,
Ryan


-----Original Message-----
From: Mats Wichmann <mats at wichmann.us>
Sent: Wednesday, August 15, 2018 9:49 AM
To: SCons users mailing list <scons-users at scons.org>; RUHGE, RYAN L CTR USAF AFMC AFLCMC/HBAW-OL <ryan.ruhge.ctr at us.af.mil>
Cc: SMITH, JASON C CTR USAF AFMC AFLCMC/HBAW-OL <jason.smith.92.ctr at us.af.mil>
Subject: [Non-DoD Source] Re: [Scons-users] Feature Request: Add Support for detecting build changes via sha256

On 08/15/2018 07:30 AM, RUHGE, RYAN L CTR USAF AFMC AFLCMC/HBAW-OL wrote:
>
>
> _______________________________________________
> Scons-users mailing list
> Scons-users at scons.org
> https://pairlist4.pair.net/mailman/listinfo/scons-users
>

that seems to have been a completely empty message, did you intend to send a followup to the discussion?

as you've found out by doing it, the change to use sha256 instead of md5 on python versions that support a "modern" hashlib, which all the ones scons is supported on do, is quite simple.  to the rest of it, we don't yet understand your requirement.