summaryrefslogtreecommitdiff
path: root/src/conf_mode/salt-minion.py
diff options
context:
space:
mode:
authorChristian Poessinger <christian@poessinger.com>2022-04-16 19:06:20 +0200
committerChristian Poessinger <christian@poessinger.com>2022-04-16 19:06:20 +0200
commit83a2fc901136b9da68f50a5a2c9ae1f45dbf5e97 (patch)
tree8d13a20be6b62f73b228f2fe40cb1f041a7958d5 /src/conf_mode/salt-minion.py
parent039e323d7e46f7d8244c42794f713a0bfecbe2d3 (diff)
downloadvyos-1x-83a2fc901136b9da68f50a5a2c9ae1f45dbf5e97.tar.gz
vyos-1x-83a2fc901136b9da68f50a5a2c9ae1f45dbf5e97.zip
salt-minion: T4364: issue warning - do not use sha1 hashing algorithm
Diffstat (limited to 'src/conf_mode/salt-minion.py')
-rwxr-xr-xsrc/conf_mode/salt-minion.py4
1 files changed, 4 insertions, 0 deletions
diff --git a/src/conf_mode/salt-minion.py b/src/conf_mode/salt-minion.py
index 1ecc09d34..00b889a11 100755
--- a/src/conf_mode/salt-minion.py
+++ b/src/conf_mode/salt-minion.py
@@ -20,6 +20,7 @@ from socket import gethostname
from sys import exit
from urllib3 import PoolManager
+from vyos.base import Warning
from vyos.config import Config
from vyos.configdict import dict_merge
from vyos.configverify import verify_interface_exists
@@ -68,6 +69,9 @@ def verify(salt):
if not salt:
return None
+ if 'hash' in salt and salt['hash'] == 'sha1':
+ Warning('Do not use sha1 hashing algorithm, upgrade to sha256 or later!')
+
if 'source_interface' in salt:
verify_interface_exists(salt['source_interface'])