build.ps1 uses MD_5 which is forbidden on FIPS compliant computers

cake-build / resources

Contains different kind of resources such as bootstrappers and configuration files.

MIT License

54 stars 78 forks source link

build.ps1 uses MD_5 which is forbidden on FIPS compliant computers #85

Closed DanFTRX closed 4 years ago

DanFTRX commented 4 years ago

FIPS enabled computers will fail to create an MD5Hasher in all cases. Are there alternative FIPS compliant hashes that can be used to verify the nuget downloads?

https://github.com/cake-build/resources/blob/develop/build.ps1#L82

devlead commented 4 years ago

I would recommend bootstrapping using .NET Core tool manifest, it's FIPS compliant, you can read more about it at: https://cakebuild.net/docs/getting-started/bootstrapping-scripts#bootstrapping-for.net-core-tool

DanFTRX commented 4 years ago

Thanks.