Skip to content

Fix password validation exception for FIPS

What does this MR do and why?

When the password is less than 8 characters, OpenSSL Fips will raise error on OpenSSL::KDF.pbkdf2_hmac. This commit fixes it by not assigning value when the password value is less than 8 characters

Relates to https://gitlab.com/gitlab-com/request-for-help/-/issues/3526

References

Screenshots or screen recordings

Before After

How to set up and validate locally

MR acceptance checklist

Evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.

Merge request reports

Loading