# Node-red and node-red-nodes email nodes are not FIPS compliant

**URL:** <https://discourse.nodered.org/t/node-red-and-node-red-nodes-email-nodes-are-not-fips-compliant/85462>\
**Category:** General\
**Created:** [12 February 2024 19:12 UTC](https://discourse.nodered.org/t/node-red-and-node-red-nodes-email-nodes-are-not-fips-compliant/85462 "2024-02-12T19:12:07Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Xylene](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/xylene/32/88256_2.png) [@Xylene](https://discourse.nodered.org/u/Xylene)\
**Post date:** [12 February 2024 19:12 UTC](https://discourse.nodered.org/t/node-red-and-node-red-nodes-email-nodes-are-not-fips-compliant/85462/1 "2024-02-12T19:12:07Z")

</div>

I am using node-red version 3.1.5 with node v18.18.2 on Rocky Linux 9.3. The system has the FIPS crytpo policy enabled.

I am using the node-red-nodes email node as part of my dataflow. When I attempt to start node-red it fails with:

```auto
 - [warn] Error loading flows: Error: error:0308010C:digital envelope routines::unsupported
 - [red] Uncaught Exception:
 - [error] Error: error:0308010C:digital envelope routines::unsupported
    at new Hash (node:internal/crypto/hash:69:19)
    at Object.createHash (node:crypto:133:10)
    at editor (/usr/local/lib/node_modules/node-red/node_modules/@node-red/editor-api/lib/editor/ui.js:102:34)
    at Layer.handle [as handle_request] (/usr/local/lib/node_modules/node-red/node_modules/express/lib/router/layer.js:95:5)
    at next (/usr/local/lib/node_modules/node-red/node_modules/express/lib/router/route.js:144:13)
    at ensureSlash (/usr/local/lib/node_modules/node-red/node_modules/@node-red/editor-api/lib/editor/ui.js:50:13)
    at Layer.handle [as handle_request] (/usr/local/lib/node_modules/node-red/node_modules/express/lib/router/layer.js:95:5)
    at next (/usr/local/lib/node_modules/node-red/node_modules/express/lib/router/route.js:144:13)
    at /usr/local/lib/node_modules/node-red/node_modules/@node-red/editor-api/lib/editor/index.js:39:13
    at process.processTicksAndRejections (node:internal/process/task_queues:95:5)

```

This failure is occurring because node-red is using the MD5 hash algorithm which is outdated and non-FIPS compliant.

If I check out the code and fix the issues with the md5 hash, then I see errors in the node-red-nodes email node with the same problem.

I have a PR that I would like to submit to fix this issue, what is the best way to go about it?

---

<div class="post-metadata">

**Author:** ![Steve-Mcl](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/steve-mcl/32/4826_2.png) [@Steve-Mcl](https://discourse.nodered.org/u/Steve-Mcl)\
**Post date:** [12 February 2024 19:15 UTC](https://discourse.nodered.org/t/node-red-and-node-red-nodes-email-nodes-are-not-fips-compliant/85462/2 "2024-02-12T19:15:59Z")

</div>

> [@Xylene](#):
>
> what is the best way to go about it

First raise an issue [here](https://github.com/node-red/node-red-nodes/issues) & add the above detail and a comment about wishing to provide a PR.

We will assess the issue and PR as they arrive.

Thanks for your interest.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex026/uploads/nodered/original/1X/d073cd938eafa2e558d7c2cd59003b3ef4963033.png) [@system](https://discourse.nodered.org/u/system)\
**Post date:** [12 May 2024 19:16 UTC](https://discourse.nodered.org/t/node-red-and-node-red-nodes-email-nodes-are-not-fips-compliant/85462/3 "2024-05-12T19:16:58Z")

</div>

This topic was automatically closed 90 days after the last reply. New replies are no longer allowed.