-
Notifications
You must be signed in to change notification settings - Fork 1.2k
Open
Description
Hi,
Newman does not work in a FIPS-compliant environment due to its dependency on the serialised-error addon (https://github.com/postmanlabs/serialised-error), which uses MD5 hashing for checksums.
To resolve this issue, please consider either replacing the serialised-error addon or modifying it (since it is also maintained by Postman Labs) to use SHA-256 hashing instead.
Specifically, you can update the following line in index.js:
this.checksum = hash.MD5(this);
to:
this.checksum = crypto.createHash('sha256').update(JSON.stringify(this)).digest('hex');
Additionally, the object-hash dependency should be removed, as simply initializing it is not supported in a FIPS-compliant environment.
Thanks!
thetumper
Metadata
Metadata
Assignees
Labels
No labels