Bug 1830090

Summary:	OpenJDK - Consistent FIPS behavior between RHEL and Fedora
Product:	[Fedora] Fedora	Reporter:	Alex Scheel <ascheel>
Component:	java-11-openjdk	Assignee:	Andrew John Hughes <ahughes>
Status:	CLOSED ERRATA	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	33	CC:	ahughes, ashundi, cheimes, jerboaa, jvanek, projects.rg, rcritten
Target Milestone:	---
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:	java-11-openjdk-11.0.11.0.9-4.fc35 java-11-openjdk-11.0.12.0.7-6.fc36	Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2021-06-03 20:17:15 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Alex Scheel 2020-04-30 20:02:39 UTC

Description of problem:

As discussed internally, I'd appreciate it if OpenJDK responded to crypto-policies and FIPS mode like it will on RHEL. In particular, if the system is in FIPS mode it should behave as if -Dcom.redhat.fips=true was passed, enabling (among other things) the FIPS version of the SunPKCS11 NSS provider.

It'd be nice if support landed soon-ish in Rawhide so we could begin testing FIPS mode support ahead of it being available in RHEL.


Thanks!


Version-Release number of selected component (if applicable):

java-11-openjdk-11.0.7.10-0.fc33

Comment 1 Ben Cotton 2020-08-11 13:21:40 UTC

This bug appears to have been reported against 'rawhide' during the Fedora 33 development cycle.
Changing version to 33.

Comment 2 Andrew John Hughes 2021-06-02 16:57:20 UTC

PR of current RHEL 8 state posted for Fedora rawhide: https://src.fedoraproject.org/rpms/java-11-openjdk/pull-request/120

Comment 3 Fedora Update System 2021-06-03 20:11:19 UTC

FEDORA-2021-6405b141dc has been submitted as an update to Fedora 35. https://bodhi.fedoraproject.org/updates/FEDORA-2021-6405b141dc

Comment 4 Fedora Update System 2021-06-03 20:17:15 UTC

FEDORA-2021-6405b141dc has been pushed to the Fedora 35 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 5 Fedora Update System 2021-09-03 17:49:46 UTC

FEDORA-2021-fb40acc444 has been submitted as an update to Fedora 36. https://bodhi.fedoraproject.org/updates/FEDORA-2021-fb40acc444

Comment 6 Fedora Update System 2021-09-03 17:55:38 UTC

FEDORA-2021-fb40acc444 has been pushed to the Fedora 36 stable repository.
If problem still persists, please make note of it in this bug report.