Using JKS truststore leads to "FIPS mode: only SunJSSE TrustManagers may be used" --------------------------------------------------------------------------------- Key: WFCORE-1437 URL: https://issues.jboss.org/browse/WFCORE-1437 Project: WildFly Core Issue Type: Bug Components: Domain Management, Security Affects Versions: 2.1.0.CR1 Environment: Oracle java in Fips mode Reporter: Martin Choma Assignee: Darran Lofthouse Priority: Blocker Fix For: 2.1.0.CR2 User can't start domain in FIPS mode when JKS truststore is used in master <-> slave host controllers communication. (Using PKCS11 keystore works well) {code} [Host Controller] ^[[0m^[[31m15:52:23,822 ERROR [org.jboss.msc.service.fail] (MSC service thread 1-8) MSC000001: Failed to start service jboss.server.controller.management.security_realm.SlaveManagementRealm.ssl-context-trust-only: org.jboss.msc.service.StartException in service jboss.server.controller.management.security_realm.SlaveManagementRealm.ssl-context-trust-only: WFLYDM0018: Unable to start service^[[0m [Host Controller] ^[[31m at org.jboss.as.domain.management.security.SSLContextService.start(SSLContextService.java:124)^[[0m [Host Controller] ^[[31m at org.jboss.msc.service.ServiceControllerImpl$StartTask.startService(ServiceControllerImpl.java:1948)^[[0m [Host Controller] ^[[31m at org.jboss.msc.service.ServiceControllerImpl$StartTask.run(ServiceControllerImpl.java:1881)^[[0m [Host Controller] ^[[31m at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)^[[0m [Host Controller] ^[[31m at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)^[[0m [Host Controller] ^[[31m at java.lang.Thread.run(Thread.java:745)^[[0m [Host Controller] ^[[31mCaused by: java.security.KeyManagementException: FIPS mode: only SunJSSE TrustManagers may be used^[[0m [Host Controller] ^[[31m at sun.security.ssl.SSLContextImpl.chooseTrustManager(SSLContextImpl.java:124)^[[0m [Host Controller] ^[[31m at sun.security.ssl.SSLContextImpl.engineInit(SSLContextImpl.java:87)^[[0m [Host Controller] ^[[31m at javax.net.ssl.SSLContext.init(SSLContext.java:282)^[[0m [Host Controller] ^[[31m at org.jboss.as.domain.management.security.SSLContextService.start(SSLContextService.java:87)^[[0m [Host Controller] ^[[31m ... 5 more^[[0m [Hos {code}