hashlib.md5 doesn't work when FIPS is enabled

[dantebben]

Python Version

3.9.9

pytest Version

6.2.5

Package Version

3.10.2

Description

On a system where FIPS is enabled, pytest-randomly fails on line 275

hasher = hashlib.md5()

with the following error

ValueError: [digital envelope routines: EVP_DigestInit_ex] disabled for FIPS

This appears to be common among tools that use hashlib. The following workaround seems to fix the problem, edit pytest_randomly/__init__.py line 275 to be:

hasher = hashlib.md5(usedforsecurity=False)

I found this idea for a fix here: s3tools/s3cmd#1005 (comment). This issue was related to another package using hashlib.md5

[johnthagen]

Note that usedforsecurity was introduced in 3.9: https://docs.python.org/3/library/hashlib.html#hash-algorithms

Some kind of conditional will be needed to support older versions of Python.

pytest-randomly/.github/workflows/main.yml

Lines 16 to 21 in fbb03b7

	python-version:
	- 3.6
	- 3.7
	- 3.8
	- 3.9
	- '3.10'

[adamchainz]

Thanks for the report. This has been fixed in #415 and released in version 3.10.3. Enjoy.

[dantebben]

awesome! thanks.