Maven packages: Disable MD5 in FIPS mode
In https://gitlab.com/gitlab-org/gitlab/blob/ff87c7cd39041a089df6bdaaf6f365028cdd8852/app/services/packages/maven/metadata/append_package_file_service.rb#L75, we compute the MD5 for Maven packages. We need to disable the use of MD5 outright in FIPS mode (Gitlab::FIPS.enabled?
).
Edited by Stan Hu