Bug 1830090 - OpenJDK - Consistent FIPS behavior between RHEL and Fedora
Summary: OpenJDK - Consistent FIPS behavior between RHEL and Fedora
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Fedora
Classification: Fedora
Component: java-11-openjdk
Version: 33
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Andrew John Hughes
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2020-04-30 20:02 UTC by Alex Scheel
Modified: 2021-09-03 17:55 UTC (History)
7 users (show)

Fixed In Version: java-11-openjdk-11.0.11.0.9-4.fc35 java-11-openjdk-11.0.12.0.7-6.fc36
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2021-06-03 20:17:15 UTC
Type: Bug
Embargoed:

Attachments (Terms of Use)

Description Alex Scheel 2020-04-30 20:02:39 UTC 
Description of problem:

As discussed internally, I'd appreciate it if OpenJDK responded to crypto-policies and FIPS mode like it will on RHEL. In particular, if the system is in FIPS mode it should behave as if -Dcom.redhat.fips=true was passed, enabling (among other things) the FIPS version of the SunPKCS11 NSS provider.

It'd be nice if support landed soon-ish in Rawhide so we could begin testing FIPS mode support ahead of it being available in RHEL.


Thanks!


Version-Release number of selected component (if applicable):

java-11-openjdk-11.0.7.10-0.fc33
Comment 1 Ben Cotton 2020-08-11 13:21:40 UTC 
This bug appears to have been reported against 'rawhide' during the Fedora 33 development cycle.
Changing version to 33.
Comment 2 Andrew John Hughes 2021-06-02 16:57:20 UTC 
PR of current RHEL 8 state posted for Fedora rawhide: https://src.fedoraproject.org/rpms/java-11-openjdk/pull-request/120
Comment 3 Fedora Update System 2021-06-03 20:11:19 UTC 
FEDORA-2021-6405b141dc has been submitted as an update to Fedora 35. https://bodhi.fedoraproject.org/updates/FEDORA-2021-6405b141dc
Comment 4 Fedora Update System 2021-06-03 20:17:15 UTC 
FEDORA-2021-6405b141dc has been pushed to the Fedora 35 stable repository.
If problem still persists, please make note of it in this bug report.
Comment 5 Fedora Update System 2021-09-03 17:49:46 UTC 
FEDORA-2021-fb40acc444 has been submitted as an update to Fedora 36. https://bodhi.fedoraproject.org/updates/FEDORA-2021-fb40acc444
Comment 6 Fedora Update System 2021-09-03 17:55:38 UTC 
FEDORA-2021-fb40acc444 has been pushed to the Fedora 36 stable repository.
If problem still persists, please make note of it in this bug report.
Note You need to log in before you can comment on or make changes to this bug.