Conan packages: Disable MD5 in FIPS mode
Conan packages use the MD5 value of uploaded files in the snapshot endpoints.
This value is also first handled by the Conan upload API endpoint and CreatePackageFileService
.
To be consistent with other APIs, we should return a 422 if the MD5 value is included in the API params, and remove it from the CreatePackageFileService
when FIPS is enabled.
This might cause Conan to not be functional with the standard Conan client since Conan v1 depends on the Snapshot endpoints including MD5 values.
Proposal
Disable Conan API in FIPS mode, open an issue to revisit FIPS functionality once Conan V2 is developed.
Edited by Steve Abrams