search

SumoLogic / sumologic-collector-docker

A Sumo Logic collector for Docker.
Apache License 2.0
69 stars 55 forks source link

Add support to enable the FIPS compliant JCE #81

Closed guptakeshav-sumo closed 5 years ago

guptakeshav-sumo commented 5 years ago

Testing done: I) With the collector which supported FIPS mode:

  1. Ran the docker container with -e SUMO_FIPS_JCE=true once with SUMO_GENERATE_USER_PROPERTIES=false and once without SUMO_GENERATE_USER_PROPERTIES=false. a) Ran the docker logs <containerId> command and checked the configureFipsMode.sh log lines. b) Ran sudo service collector status, and verified the collector was running. c) Checked the collector.log file for the JceProviders.scala log line (Added Bouncy Castle FIPS provider ..)

  2. Ran the docker container once with -e SUMO_FIPS_JCE=false and another without the flag once with SUMO_GENERATE_USER_PROPERTIES=false and once without SUMO_GENERATE_USER_PROPERTIES=false. a) No extra logs of configureFipsMode.sh in docker logs <containerId>. b) Ran sudo service collector status, and verified the collector was running. c) Searched the collector.log file for the Added Bouncy Castle FIPS provider .. log line, and it wasn't present.

II) With the collector which doesn't support FIPS mode (current production): docker logs <containerId> showed the configureFipsMode.sh file couldn't be found. But there was no issue in the collector getting started. Checked by running the command sudo service collector status.

guptakeshav-sumo commented 5 years ago

Merging the PR without approval for documentation as of now. If required, will make the change later on in another PR.