Generate hashCAFile with SHA256

In a FIPS environment, it's much easier to switch to SHA256 than it is to verify and explain that any particular use of MD5 is actually safe in-context. Signed-off-by: Nick Thomas <[email protected]>
prometheus · Mar 16, 2021 · c1bba9e · c1bba9e
1 parent 3ebd397
commit c1bba9e
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/config/http_config.go b/config/http_config.go
@@ -17,7 +17,7 @@ package config
 
 import (
 	"bytes"
-	"crypto/md5"
+	"crypto/sha256"
 	"crypto/tls"
 	"crypto/x509"
 	"fmt"
@@ -533,7 +533,7 @@ func (t *tlsRoundTripper) getCAWithHash() ([]byte, []byte, error) {
 	if err != nil {
 		return nil, nil, err
 	}
-	h := md5.Sum(b)
+	h := sha256.Sum256(b)
 	return b, h[:], nil
 
 }