Use secure sha256 instead of sha1

Fix for bandit B303: Use of insecure MD2, MD4, MD5, or SHA1 hash function. Change-Id: I00403d7bd3b40ae00420e6cddcf40f45488284a9 Partial-Bug: #1759250 (cherry picked from commit ab426a791a) (cherry picked from commit 62f4868e6e)
Fix broken pep8 and requirements jobs
2019-08-21 14:57:23 +09:00 · 2019-06-07 12:44:38 +00:00 · 2019-04-19 19:44:50 +00:00 · 2019-03-24 20:35:54 +00:00 · 2019-03-18 14:53:52 +00:00 · 2019-03-18 14:53:50 +00:00
7 changed files with 10 additions and 8 deletions
--- a/.gitreview
+++ b/.gitreview
@@ -1,4 +1,5 @@
 [gerrit]
-host=review.openstack.org
+host=review.opendev.org
 port=29418
 project=openstack/python-neutronclient.git
+defaultbranch=stable/stein
--- a/doc/requirements.txt
+++ b/doc/requirements.txt
@@ -3,4 +3,5 @@
 # process, which may cause wedges in the gate later.
 openstackdocstheme>=1.18.1 # Apache-2.0
 reno>=2.5.0 # Apache-2.0
-sphinx!=1.6.6,!=1.6.7,>=1.6.2 # BSD
+sphinx!=1.6.6,!=1.6.7,>=1.6.2,<2.0.0;python_version=='2.7'  # BSD
+sphinx!=1.6.6,!=1.6.7,>=1.6.2;python_version>='3.4' # BSD
--- a/neutronclient/common/utils.py
+++ b/neutronclient/common/utils.py
@@ -183,9 +183,9 @@ def http_log_req(_logger, args, kwargs):
    for (key, value) in six.iteritems(kwargs['headers']):
        if key in SENSITIVE_HEADERS:
            v = value.encode('utf-8')
-            h = hashlib.sha1(v)
+            h = hashlib.sha256(v)
            d = h.hexdigest()
-            value = "{SHA1}%s" % d
+            value = "{SHA256}%s" % d
        header = ' -H "%s: %s"' % (key, value)
        string_parts.append(header)

--- a/neutronclient/tests/functional/hooks/fwaas
+++ b/neutronclient/tests/functional/hooks/fwaas
@@ -1,2 +1,2 @@
-enable_plugin neutron-fwaas git://git.openstack.org/openstack/neutron-fwaas
+enable_plugin neutron-fwaas https://git.openstack.org/openstack/neutron-fwaas
 enable_service q-fwaas
--- a/neutronclient/tests/functional/hooks/vpnaas
+++ b/neutronclient/tests/functional/hooks/vpnaas
@@ -1 +1 @@
-enable_plugin neutron-vpnaas git://git.openstack.org/openstack/neutron-vpnaas
+enable_plugin neutron-vpnaas https://git.openstack.org/openstack/neutron-vpnaas
--- a/test-requirements.txt
+++ b/test-requirements.txt
@@ -3,7 +3,7 @@
 # process, which may cause wedges in the gate later.
 hacking>=1.1.0 # Apache-2.0

-bandit>=1.1.0 # Apache-2.0
+bandit>=1.1.0,<1.6.0 # Apache-2.0
 coverage!=4.4,>=4.0 # Apache-2.0
 fixtures>=3.0.0 # Apache-2.0/BSD
 flake8-import-order==0.12 # LGPLv3
--- a/tox.ini
+++ b/tox.ini
@@ -12,7 +12,7 @@ setenv = VIRTUAL_ENV={envdir}
         PYTHONWARNINGS=default::DeprecationWarning
 usedevelop = True
 install_command = pip install {opts} {packages}
-deps = -c{env:UPPER_CONSTRAINTS_FILE:https://git.openstack.org/cgit/openstack/requirements/plain/upper-constraints.txt}
+deps = -c{env:UPPER_CONSTRAINTS_FILE:https://releases.openstack.org/constraints/upper/stein}
       -r{toxinidir}/requirements.txt
       -r{toxinidir}/test-requirements.txt
 # Delete bytecodes from normal directories before running tests.
Author	SHA1	Message	Date
Oleg Bondarev	450039b7f9	Use secure sha256 instead of sha1 Fix for bandit B303: Use of insecure MD2, MD4, MD5, or SHA1 hash function. Change-Id: I00403d7bd3b40ae00420e6cddcf40f45488284a9 Partial-Bug: #1759250 (cherry picked from commit `ab426a791a`) (cherry picked from commit `62f4868e6e`)	2019-08-21 14:57:23 +09:00
Slawek Kaplonski	08a26a00f2	Fix broken pep8 and requirements jobs This patch solves 2 issues in gate jobs: 1. Failing pep8 job due to wrong bandit version, To fix that we cap bandit in test-requirements.txt for stable/stein release. As in neutron and other repositories, this patch cap bandit version used for stable/stein release to be lower than 1.6.0 2. Requirements job failing on sphinx, To fix that we sphinx requirements in doc/requirements.txt file Change-Id: I31c6c0596831d4445f11984b0b3ceee434a74664	2019-06-07 12:44:38 +00:00
OpenDev Sysadmins	a57eaff6c1	OpenDev Migration Patch This commit was bulk generated and pushed by the OpenDev sysadmins as a part of the Git hosting and code review systems migration detailed in these mailing list posts: http://lists.openstack.org/pipermail/openstack-discuss/2019-March/003603.html http://lists.openstack.org/pipermail/openstack-discuss/2019-April/004920.html Attempts have been made to correct repository namespaces and hostnames based on simple pattern matching, but it's possible some were updated incorrectly or missed entirely. Please reach out to us via the contact information listed at https://opendev.org/ with any questions you may have.	2019-04-19 19:44:50 +00:00
Ian Wienand	ca01b06a6d	Replace openstack.org git:// URLs with https:// This is a mechanically generated change to replace openstack.org git:// URLs with https:// equivalents. This is in aid of a planned future move of the git hosting infrastructure to a self-hosted instance of gitea (https://gitea.io), which does not support the git wire protocol at this stage. This update should result in no functional change. For more information see the thread at http://lists.openstack.org/pipermail/openstack-discuss/2019-March/003825.html Change-Id: Ib0bc9e78a38eca218d8cbdfb9aff67dc189a6f4c	2019-03-24 20:35:54 +00:00
OpenStack Release Bot	d581c8bb63	Update UPPER_CONSTRAINTS_FILE for stable/stein Update the URL to the upper-constraints file to point to the redirect rule on releases.openstack.org so that anyone working on this branch will switch to the correct upper-constraints list automatically when the requirements repository branches. Until the requirements repository has as stable/stein branch, tests will continue to use the upper-constraints list on master. Change-Id: I96f2551277f98ee0e1cd6100846f503abe5a0edd	2019-03-18 14:53:52 +00:00
OpenStack Release Bot	892c8571f0	Update .gitreview for stable/stein Change-Id: I77fe3d7c77bcee0d846e6a017755723f5de85e83	2019-03-18 14:53:50 +00:00