From 1071db2256e5a39e5b0cbbe3dc37434e378bbffb Mon Sep 17 00:00:00 2001 From: "Serg G. Brester" Date: Tue, 20 Sep 2016 00:00:26 +0200 Subject: [PATCH] filter.py: easy-fix to use sha1 instead of md5 if its usage prohibited by some systems following strict standards (like FIPS) closes gh-1540 --- fail2ban/server/filter.py | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/fail2ban/server/filter.py b/fail2ban/server/filter.py index b2031096..459a47d0 100644 --- a/fail2ban/server/filter.py +++ b/fail2ban/server/filter.py @@ -742,7 +742,12 @@ class FileFilter(Filter): try: import hashlib - md5sum = hashlib.md5 + try: + md5sum = hashlib.md5 + # try to use it (several standards like FIPS forbid it): + md5sum(' ').hexdigest() + except: # pragma: no cover + md5sum = hashlib.sha1 except ImportError: # pragma: no cover # hashlib was introduced in Python 2.5. For compatibility with those # elderly Pythons, import from md5