Bug 2006345

Summary:	java-17-openjdk / rhel-8.5: TLS_ECDHE_ECDSA_* cipher suites broken in FIPS mode
Product:	Red Hat Enterprise Linux 8	Reporter:	zzambers
Component:	java-17-openjdk	Assignee:	Martin Balao <mbalao>
Status:	CLOSED WONTFIX	QA Contact:	OpenJDK QA <java-qa>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	8.5
Target Milestone:	rc
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2023-03-21 07:27:50 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description zzambers 2021-09-21 14:05:35 UTC

TLS_ECDHE_ECDSA_* cipher suites of java-17-openjdk package are broken in FIPS mode.

Reproducible by ssl-tests [1]:
export JAVA_HOME=/usr/lib/jvm/java-17-openjdk
make clean && make TEST_PKCS11_FIPS=1 SSLTESTS_CUSTOM_JAVA_PARAMS=-Djdk.tls.ephemeralDHKeySize=2048
...
Sep 21, 2021 1:25:13 PM SSLSocketServer$1 run
SEVERE: null
javax.net.ssl.SSLException: Received fatal alert: internal_error
	at java.base/sun.security.ssl.Alert.createSSLException(Alert.java:133)
	at java.base/sun.security.ssl.Alert.createSSLException(Alert.java:117)
	at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:358)
	at java.base/sun.security.ssl.Alert$AlertConsumer.consume(Alert.java:293)
	at java.base/sun.security.ssl.TransportContext.dispatch(TransportContext.java:204)
	at java.base/sun.security.ssl.SSLTransport.decode(SSLTransport.java:172)
	at java.base/sun.security.ssl.SSLSocketImpl.decode(SSLSocketImpl.java:1500)
	at java.base/sun.security.ssl.SSLSocketImpl.readHandshakeRecord(SSLSocketImpl.java:1415)
	at java.base/sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:450)
	at java.base/sun.security.ssl.SSLSocketImpl.ensureNegotiated(SSLSocketImpl.java:915)
	at java.base/sun.security.ssl.SSLSocketImpl$AppInputStream.read(SSLSocketImpl.java:1006)
	at java.base/sun.security.ssl.SSLSocketImpl$AppInputStream.read(SSLSocketImpl.java:966)
	at SSLSocketServer.serverLoop(SSLSocketServer.java:133)
	at SSLSocketServer$1.run(SSLSocketServer.java:75)
	at java.base/java.lang.Thread.run(Thread.java:833)

Sep 21, 2021 1:25:13 PM SSLSocketTester testConfiguration
SEVERE: null
javax.net.ssl.SSLException: Initialization failed
	at java.base/sun.security.ssl.Alert.createSSLException(Alert.java:133)
	at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:371)
	at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:314)
	at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:309)
	at java.base/sun.security.ssl.SSLSocketImpl.handleException(SSLSocketImpl.java:1702)
	at java.base/sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:465)
	at java.base/sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:421)
	at SSLSocketClient.test(SSLSocketClient.java:72)
	at SSLSocketTester.testConfiguration(SSLSocketTester.java:392)
	at SSLSocketTester.testConfigurations(SSLSocketTester.java:322)
	at SSLSocketTester.testProvider(SSLSocketTester.java:234)
	at SSLSocketTester.testProviders(SSLSocketTester.java:190)
	at Main.main(Main.java:30)
Caused by: java.security.ProviderException: Initialization failed
	at jdk.crypto.cryptoki/sun.security.pkcs11.P11Signature.initialize(P11Signature.java:368)
	at jdk.crypto.cryptoki/sun.security.pkcs11.P11Signature.engineInitVerify(P11Signature.java:471)
	at java.base/java.security.SignatureSpi.engineInitVerify(SignatureSpi.java:102)
	at java.base/java.security.Signature$Delegate.tryOperation(Signature.java:1324)
	at java.base/java.security.Signature$Delegate.chooseProvider(Signature.java:1276)
	at java.base/java.security.Signature$Delegate.engineInitVerify(Signature.java:1363)
	at java.base/java.security.Signature.initVerify(Signature.java:529)
	at java.base/java.security.Signature$1.initVerify(Signature.java:132)
	at java.base/sun.security.util.SignatureUtil.initVerifyWithParam(SignatureUtil.java:175)
	at java.base/sun.security.ssl.SignatureScheme.getVerifier(SignatureScheme.java:578)
	at java.base/sun.security.ssl.ECDHServerKeyExchange$ECDHServerKeyExchangeMessage.<init>(ECDHServerKeyExchange.java:274)
	at java.base/sun.security.ssl.ECDHServerKeyExchange$ECDHServerKeyExchangeConsumer.consume(ECDHServerKeyExchange.java:511)
	at java.base/sun.security.ssl.ServerKeyExchange$ServerKeyExchangeConsumer.consume(ServerKeyExchange.java:111)
	at java.base/sun.security.ssl.SSLHandshake.consume(SSLHandshake.java:396)
	at java.base/sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:480)
	at java.base/sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:458)
	at java.base/sun.security.ssl.TransportContext.dispatch(TransportContext.java:201)
	at java.base/sun.security.ssl.SSLTransport.decode(SSLTransport.java:172)
	at java.base/sun.security.ssl.SSLSocketImpl.decode(SSLSocketImpl.java:1500)
	at java.base/sun.security.ssl.SSLSocketImpl.readHandshakeRecord(SSLSocketImpl.java:1415)
	at java.base/sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:450)
	... 7 more
Caused by: sun.security.pkcs11.wrapper.PKCS11Exception: CKR_MECHANISM_INVALID
	at jdk.crypto.cryptoki/sun.security.pkcs11.wrapper.PKCS11.C_VerifyInit(Native Method)
	at jdk.crypto.cryptoki/sun.security.pkcs11.P11Signature.initialize(P11Signature.java:362)
	... 27 more

FAILED: SunJSSE/Default: TLSv1.2 + TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA
...


Openjdk build:
java-17-openjdk-devel-17.0.0.0.33-0.5.ea.el8


Additional info:
Situation somewhat improved after patch, which disables non-fips crypto from SUN and SunEC providers [2]. TLS_ECDHE_RSA_WITH_AES_* cipher suites are now passing and exception for TLS_ECDHE_ECDSA_.* has changed. For builds prior to this patch (java-17-openjdk-headless-17.0.0.0.33-0.2.ea.el8) all TLS_EDCHE_* were failing with exception as described in this epel bug: [3].


[1] https://github.com/zzambers/ssl-tests
[2] http://pkgs.devel.redhat.com/cgit/rpms/java-17-openjdk/commit/?h=rhel-8.5.0&id=526f27daaeed6c737f91315386efa5ab368696a6
[3] https://bugzilla.redhat.com/show_bug.cgi?id=1964109

Comment 2 RHEL Program Management 2023-03-21 07:27:50 UTC

After evaluating this issue, there are no plans to address it further or fix it in an upcoming release.  Therefore, it is being closed.  If plans change such that this issue will be fixed in an upcoming release, then the bug can be reopened.