Merge pull request #952 from martinRenou/remove_openssl_pinning

Remove OpenSSL pinning

.github/workflows/main.yml

@@ -53,11 +53,3 @@ jobs:
 
     - name: Import check
       run: python -c 'import ipyleaflet'
-
-    - name: Build docs (Only on Linux for saving time)
-      if: matrix.os == 'ubuntu-latest'
-      run: |
-        mamba install sphinx sphinx_rtd_theme
-        pip install -r docs/requirements.txt
-        cd docs
-        make html

.github/workflows/ui-tests.yml

@@ -29,10 +29,7 @@ jobs:
           channels: conda-forge
 
       - name: Mamba install dependencies
-        run: mamba install python=${{ matrix.python-version }} pip nodejs flake8
-
-      - name: Mamba install dependencies
-        run: mamba install jupyterlab ipywidgets openssl=1.1.1l jupyter-packaging~=0.7.9
+        run: mamba install python=${{ matrix.python-version }} pip nodejs flake8 jupyterlab ipywidgets jupyter-packaging~=0.7.9
 
       - name: Install ipyleaflet
         run: pip install .

.github/workflows/update_galata_references.yml

@@ -39,10 +39,7 @@ jobs:
           channels: conda-forge
 
       - name: Mamba install dependencies
-        run: mamba install python=${{ matrix.python-version }} pip nodejs flake8
-
-      - name: Mamba install dependencies
-        run: mamba install jupyterlab ipywidgets openssl=1.1.1l jupyter-packaging~=0.7.9
+        run: mamba install python=${{ matrix.python-version }} pip nodejs flake8 jupyterlab ipywidgets jupyter-packaging~=0.7.9
 
       - name: Install ipyleaflet
         run: pip install .

js/package.json

@@ -61,6 +61,7 @@
   "jupyterlab": {
     "extension": "src/jupyterlab-plugin",
     "outputDir": "../ipyleaflet/labextension",
+    "webpackConfig": "webpack.lab.config.js",
     "sharedPackages": {
       "@jupyter-widgets/base": {
         "bundled": false,

js/webpack.config.js

@@ -1,5 +1,11 @@
 var path = require('path');
 var version = require('./package.json').version;
+var crypto = require('crypto');
+
+// Workaround for loaders using "md4" by default, which is not supported in FIPS-compliant OpenSSL
+var cryptoOrigCreateHash = crypto.createHash;
+crypto.createHash = (algorithm) =>
+  cryptoOrigCreateHash(algorithm == 'md4' ? 'sha256' : algorithm);
 
 var rules = [
     {

js/webpack.lab.config.js

@@ -0,0 +1,6 @@
+const crypto = require('crypto');
+
+// Workaround for loaders using "md4" by default, which is not supported in FIPS-compliant OpenSSL
+const cryptoOrigCreateHash = crypto.createHash;
+crypto.createHash = (algorithm) =>
+  cryptoOrigCreateHash(algorithm == 'md4' ? 'sha256' : algorithm);