Dirkjan Bussink 0f6c9bc786 Add an ActiveSupport option to allow setting a digest class ... Right now it's already possible to set a digest class manually, but this is not through a publicly supported and approved API. With these configuration options, it is possible to configure a digest class to use for digests inside Rails. The reason for this is that it allows configuring other classes in certain conditions like running in FIPS mode. FIPS disallows MD5 and discourages SHA1. Even though this isn't used in Rails for security related things, using newer hash algorithms means not having to explain it to auditors which always makes life easier. That's not the only reason though. If today Ruby is built and running for example in an Ubuntu 18.04 FIPS approved environment, the default Digest classes break, see https://bugs.ruby-lang.org/issues/13681 as well. By allowing a class to be configured, the following can be used so that things work properly (using the new API proposed here): ``` Rails.application.config.active_support.hash_digest_class = OpenSSL::Digest::SHA256 ``` This would then use the OpenSSL certified FIPS implementation as well.		2020-09-23 17:47:35 +02:00
..
bootstrap.rb	Simplify lookup_store	2020-02-05 14:07:56 +09:00
configuration.rb	Add an ActiveSupport option to allow setting a digest class	2020-09-23 17:47:35 +02:00
default_middleware_stack.rb	Change default HTTP status to 308 for ActionDispatch::SSL.	2020-07-06 14:51:24 +08:00
dummy_erb_compiler.rb
finisher.rb	The warning for autoloaded constants on boot includes a solution	2020-05-17 10:12:15 +02:00
routes_reloader.rb	Bring back feature that allows loading external route iles:	2019-12-06 14:20:12 +01:00