Bug 2023537

Summary: Use the NSS SQL Database in FIPS Mode [rhel-9, openjdk-17]
Product: Red Hat Enterprise Linux 9 Reporter: Andrew John Hughes <ahughes>
Component: java-17-openjdkAssignee: Andrew John Hughes <ahughes>
Status: CLOSED ERRATA QA Contact: OpenJDK QA <java-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 9.0CC: jandrlik, jvanek
Target Milestone: rcKeywords: Triaged
Target Release: 9.0   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: java-17-openjdk-17.0.1.0.12-2.el9 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2022-05-17 14:06:28 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Andrew John Hughes 2021-11-16 01:04:08 UTC
This bug was initially created as a copy of Bug #2023536

I am copying this bug because: 

RHEL 9 needs to be kept in sync with RHEL 8.

This bug was initially created as a copy of Bug #2023532

I am copying this bug because: 

OpenJDK 17 needs to be kept in sync with 8u.

NSS has offered a SQLite SecMod database for some time, to replace the Berkeley DB one. In Fedora 35, the Berkeley DB one has been removed, so we have had to switch there (see https://bugzilla.redhat.com/show_bug.cgi?id=2019555). Given NSS updates have made the SQLite database available as far back as RHEL 6, we should also switch RHEL to using this rather than maintaining an unnecessary difference from Fedora.

Comment 7 errata-xmlrpc 2022-05-17 14:06:28 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (new packages: java-17-openjdk), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2022:2647