diff --git a/changelogs/fragments/51357-module_utils-basic.yml b/changelogs/fragments/51357-module_utils-basic.yml deleted file mode 100644 index ed7db90791..0000000000 --- a/changelogs/fragments/51357-module_utils-basic.yml +++ /dev/null @@ -1,3 +0,0 @@ ---- -bugfixes: - - ansible.module_utils.basic - fix handling of md5 in algorithms tuple for FIPS compatibility (https://github.com/ansible/ansible/issues/51355) diff --git a/changelogs/fragments/md5-hash-algorithms-pop-fix.yaml b/changelogs/fragments/md5-hash-algorithms-pop-fix.yaml new file mode 100644 index 0000000000..df81ce1a92 --- /dev/null +++ b/changelogs/fragments/md5-hash-algorithms-pop-fix.yaml @@ -0,0 +1,2 @@ +bugfixes: + - basic - modify the correct variable when determining available hashing algorithms to avoid errors when md5 is not available (https://github.com/ansible/ansible/issues/51355) diff --git a/lib/ansible/module_utils/basic.py b/lib/ansible/module_utils/basic.py index 9901f77196..bcd8edd5c0 100644 --- a/lib/ansible/module_utils/basic.py +++ b/lib/ansible/module_utils/basic.py @@ -129,12 +129,10 @@ try: for attribute in ('available_algorithms', 'algorithms'): algorithms = getattr(hashlib, attribute, None) if algorithms: - # convert algorithms to list instead of immutable tuple so md5 can be removed if not available - algorithms = list(algorithms) break if algorithms is None: # python 2.5+ - algorithms = ['md5', 'sha1', 'sha224', 'sha256', 'sha384', 'sha512'] + algorithms = ('md5', 'sha1', 'sha224', 'sha256', 'sha384', 'sha512') for algorithm in algorithms: AVAILABLE_HASH_ALGORITHMS[algorithm] = getattr(hashlib, algorithm) @@ -142,7 +140,7 @@ try: try: hashlib.md5() except ValueError: - algorithms.remove('md5') + AVAILABLE_HASH_ALGORITHMS.pop('md5', None) except Exception: import sha AVAILABLE_HASH_ALGORITHMS = {'sha1': sha.sha}