Martin Choma created WFLY-8112:
----------------------------------
Summary: Elytron subsystem is unable to configure
com.sun.net.ssl.internal.ssl.Provider in FIPS mode
Key: WFLY-8112
URL:
https://issues.jboss.org/browse/WFLY-8112
Project: WildFly
Issue Type: Bug
Components: Security
Reporter: Martin Choma
Assignee: Darran Lofthouse
Priority: Blocker
Trying to configure server to run in FIPS mode using subsystem capabilities.
I can't configure throught subsystem same as in java.security file:
{code:title=java.security}
security.provider.5=com.sun.net.ssl.internal.ssl.Provider SunPKCS11-testPkcs
{code}
because there is no possibility in subsystem to call provider constructor with arguments
(I don't mean providers configuration)
Subsystem implements provider loading in 2 steps
* create provider instance (call noargs constructor)
* optionally load configuration
But to create {{com.sun.net.ssl.internal.ssl.Provider}} in FIPS mode constructor with
arguments must be called [1]
[1]
http://grepcode.com/file/repository.grepcode.com/java/root/jdk/openjdk/8u...
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)