(MODULES-7333) - Change hashing method from MD5 to SHA256

diff --git a/lib/puppet/provider/firewall/iptables.rb b/lib/puppet/provider/firewall/iptables.rb
index ce01c282742511e243934400fd272e35ed530b0b..8b375c82c5be381bee06e5b0ef7b13fbb4245353 100644 (file)
--- a/lib/puppet/provider/firewall/iptables.rb
+++ b/lib/puppet/provider/firewall/iptables.rb
@@ -1,5 +1,5 @@
 require 'puppet/provider/firewall'
-require 'digest/md5'
+require 'digest'
 
 Puppet::Type.type(:firewall).provide :iptables, parent: Puppet::Provider::Firewall do
   include Puppet::Util::Firewall
@@ -647,7 +647,7 @@ Puppet::Type.type(:firewall).provide :iptables, parent: Puppet::Provider::Firewa
     # by appending a high level
     if !hash[:name]
       num = 9000 + counter
-      hash[:name] = "#{num} #{Digest::MD5.hexdigest(line)}"
+      hash[:name] = "#{num} #{Digest::SHA256.hexdigest(line)}"
     elsif not %r{^\d+[[:graph:][:space:]]+$} =~ hash[:name] # rubocop:disable Style/Not : Making this change breaks the code
       num = 9000 + counter
       hash[:name] = "#{num} #{%r{([[:graph:][:space:]]+)}.match(hash[:name])[1]}"

diff --git a/spec/unit/puppet/provider/iptables_spec.rb b/spec/unit/puppet/provider/iptables_spec.rb
index 4bebd37f1e93031b35e913edfe9c990b4b79990f..e344773f08c4e4808809ce8162665ce054fd3ecb 100644 (file)
--- a/spec/unit/puppet/provider/iptables_spec.rb
+++ b/spec/unit/puppet/provider/iptables_spec.rb
@@ -269,7 +269,7 @@ describe 'iptables provider' do
     let(:instance) { provider.new(resource) }
 
     it 'rule name contains a MD5 sum of the line' do
-      expect(resource[:name]).to eq("9000 #{Digest::MD5.hexdigest(resource[:line])}")
+      expect(resource[:name]).to eq("9000 #{Digest::SHA256.hexdigest(resource[:line])}")
     end
 
     resource_types = [:chain, :source, :destination, :proto, :dport, :sport, :action]
@@ -290,7 +290,7 @@ describe 'iptables provider' do
     let(:instance) { provider.new(resource) }
 
     it 'rule name contains a MD5 sum of the line' do
-      expect(resource[:name]).to eq("9000 #{Digest::MD5.hexdigest(resource[:line])}")
+      expect(resource[:name]).to eq("9000 #{Digest::SHA256.hexdigest(resource[:line])}")
     end
 
     resource_types = [:chain, :proto, :dport, :state, :action]