search

ibmruntimes / openj9-openjdk-jdk

Extensions for OpenJDK for Eclipse OpenJ9
GNU General Public License v2.0
17 stars 73 forks source link

Update OpenJCEPlusFIPS Strict and Weakly-Enforced profiles #802

Closed taoliult closed 2 months ago

taoliult commented 3 months ago

This PR updates OpenJCEPlusFIPS Strict and Weakly-Enforced profiles.

The Strict profile for FIPS 140-3 which only allows the approved cryptography in the OpenJCEPlusFIPS provider along with other non-cryptographic algorithms commonly used.

The Weakly-Enforced profile for FIPS 140-3 which allows for all algorithms within the OpenJCEPlusFIPS provider.

Also, update the profile disabledAlgorithms with non-FIPS ciphers.

This PR depends on the following 2 PRs: https://github.com/ibmruntimes/openj9-openjdk-jdk/pull/793 https://github.com/ibmruntimes/openj9-openjdk-jdk/pull/758

taoliult commented 2 months ago

@keithc-ca Codes updated according to code review. Please help to review and advise.

taoliult commented 2 months ago

@keithc-ca Updated the commit message, and corrected the spellings, please help to review and advise.

keithc-ca commented 2 months ago

Please address the merge conflict.

taoliult commented 2 months ago

@keithc-ca Merge conflict solved.

keithc-ca commented 2 months ago

Jenkins test sanity alinux jdknext

keithc-ca commented 2 months ago

The test failure is known: https://github.com/eclipse-openj9/openj9/issues/14706.

taoliult commented 2 months ago

No need to back-port into OpenJDK8 since there is no OpenJCEPlusFIPS profile in OpenJDK8.