Commit Graph

4 Commits

Author SHA1 Message Date
Jiri Vanek c41e92d502 returned lost nss.fips.cfg 2023-05-11 15:59:27 +02:00
Petra Mikova 4d35602a37 Update FIPS support to bring in latest changes
* Add nss.fips.cfg support to OpenJDK tree
* RH2117972: Extend the support for NSS DBs (PKCS11) in FIPS mode
* Remove forgotten dead code from RH2020290 and RH2104724

Drop local nss.fips.cfg.in handling now this is handled in the
patched OpenJDK build
2023-02-06 13:31:53 +01:00
Francisco Ferrari Bihurriet 92f9e6d8e3 RH2007331: SecretKey generate/import operations don't add the CKA_SIGN attribute in FIPS mode
Use SunPKCS11 Attributes Configuration to set CKA_SIGN=true on SecretKey generate/import operations in FIPS mode, see:
https://docs.oracle.com/en/java/javase/17/security/pkcs11-reference-guide1.html#GUID-C4ABFACB-B2C9-4E71-A313-79F881488BB9__PKCS11-ATTRIBUTES-CONFIGURATION
2022-06-30 14:22:25 -03:00
Jiri Vanek f32499609c Initial load 2021-12-07 15:45:09 +01:00