search

ibmruntimes / openj9-openjdk-jdk17

Extensions for OpenJDK 17 for Eclipse OpenJ9
GNU General Public License v2.0
23 stars 53 forks source link

Update OpenJCEPlusFIPS Strict and Weakly-Enforced profiles #361

Closed taoliult closed 2 months ago

taoliult commented 2 months ago

This is a back port PR from JDKNext PR https://github.com/ibmruntimes/openj9-openjdk-jdk/pull/802

This PR updates OpenJCEPlusFIPS Strict and Weakly-Enforced profiles.

The Strict profile for FIPS 140-3 which only allows the approved cryptography in the OpenJCEPlusFIPS provider along with other non-cryptographic algorithms commonly used.

The Weakly-Enforced profile for FIPS 140-3 which allows for all algorithms within the OpenJCEPlusFIPS provider.

Also, update the profile disabledAlgorithms with non-FIPS ciphers.

keithc-ca commented 2 months ago

Jenkins test sanity amac jdk17