[reportlab-users] Error while working in `FID` enabled systems

[Nithin M S]

Hi All,

While working on `Federal Information Processing Standard (FIPS)` enabled
systems like `RHEL`, getting the following error:
```
  File
"./vu_commons/reports/datasource/dashboards/dashboard_data_source.py", line
776, in add_reports_footer
  File
"/opt/app-root/lib64/python3.11/site-packages/reportlab/pdfgen/canvas.py",
line 305, in __init__
    self._doc = pdfdoc.PDFDocument(compression=pageCompression,
                ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File
"/opt/app-root/lib64/python3.11/site-packages/reportlab/pdfbase/pdfdoc.py",
line 137, in __init__
    sig = self.signature = md5()
                           ^^^^^
_hashlib.UnsupportedDigestmodError: [digital envelope routines] unsupported
```

I understand that this is an error from the `hashlib` library indicating
that the `md5` algorithm is not a safer algorithm.
There seems to be a work around for this by using something like `md5(...,
usedforsecurity=False)`.

Now, my question is whether it makes sense to implement `userforsecurity`
in reportlab or a different algorithm altogether to be safer from security
compliances.

Thanks

Regards,
Nithin
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://pairlist2.pair.net/pipermail/reportlab-users/attachments/20250306/9d7fe7bd/attachment.htm>