[
https://issues.jboss.org/browse/WFCORE-2384?page=com.atlassian.jira.plugi...
]
Darran Lofthouse moved WFLY-8112 to WFCORE-2384:
------------------------------------------------
Project: WildFly Core (was: WildFly)
Key: WFCORE-2384 (was: WFLY-8112)
Component/s: Security
(was: Security)
Elytron subsystem is unable to configure
com.sun.net.ssl.internal.ssl.Provider in FIPS mode
-------------------------------------------------------------------------------------------
Key: WFCORE-2384
URL:
https://issues.jboss.org/browse/WFCORE-2384
Project: WildFly Core
Issue Type: Bug
Components: Security
Reporter: Martin Choma
Assignee: Darran Lofthouse
Priority: Blocker
Trying to configure server to run in FIPS mode using subsystem capabilities.
I can't configure throught subsystem same as in java.security file:
{code:title=java.security}
security.provider.5=com.sun.net.ssl.internal.ssl.Provider SunPKCS11-testPkcs
{code}
because there is no possibility in subsystem to call provider constructor with arguments
(I don't mean providers configuration)
Subsystem implements provider loading in 2 steps
* create provider instance (call noargs constructor)
* optionally load configuration
But to create {{com.sun.net.ssl.internal.ssl.Provider}} in FIPS mode constructor with
arguments must be called [1]
[1]
http://grepcode.com/file/repository.grepcode.com/java/root/jdk/openjdk/8u...
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)