Rubygems packages: Disable MD5 in FIPS mode
In https://gitlab.com/gitlab-org/gitlab/-/blob/ab55a9dd14e92281fc54bef8c3a49dbf41da7b95/app/services/packages/rubygems/create_gemspec_service.rb#L32, we compute the MD5 for Rubygems packages. We need to disable the use of MD5 outright in FIPS mode (Gitlab::FIPS.enabled?
).
Edited by Steve Abrams