[jboss-jira] [JBoss JIRA] (ELY-1578) Upgrade to Fedora 28 breaks FIPS scenarios

[Martin Choma (JIRA)]

    [ https://issues.jboss.org/browse/ELY-1578?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13571508#comment-13571508 ] 

Martin Choma commented on ELY-1578:
-----------------------------------

[~fjuma][~honza889][~rlucente-se-jboss] Any hints how to came over this problem? I will continue with investigation on Monday.  But seems this will be the big topic.

> Upgrade to Fedora 28 breaks FIPS scenarios
> ------------------------------------------
>
>                 Key: ELY-1578
>                 URL: https://issues.jboss.org/browse/ELY-1578
>             Project: WildFly Elytron
>          Issue Type: Bug
>    Affects Versions: 1.3.1.Final
>            Reporter: Martin Choma
>
> On Fedora 28 I get 
> {code}
> 14:52:28,813 ERROR [org.jboss.msc.service.fail] (MSC service thread 1-2) MSC000001: Failed to start service jboss.as: org.jboss.msc.service.StartException in service jboss.as: Failed to start service
> 	at org.jboss.msc at 1.3.2.Final-redhat-1//org.jboss.msc.service.ServiceControllerImpl$StartTask.execute(ServiceControllerImpl.java:1706)
> 	at org.jboss.msc at 1.3.2.Final-redhat-1//org.jboss.msc.service.ServiceControllerImpl$ControllerTask.run(ServiceControllerImpl.java:1540)
> 	at org.jboss.threads at 2.3.2.Final//org.jboss.threads.ContextClassLoaderSavingRunnable.run(ContextClassLoaderSavingRunnable.java:35)
> 	at org.jboss.threads at 2.3.2.Final//org.jboss.threads.EnhancedQueueExecutor.safeRun(EnhancedQueueExecutor.java:1985)
> 	at org.jboss.threads at 2.3.2.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.doRunTask(EnhancedQueueExecutor.java:1487)
> 	at org.jboss.threads at 2.3.2.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.run(EnhancedQueueExecutor.java:1378)
> 	at java.base/java.lang.Thread.run(Thread.java:844)
> Caused by: java.security.ProviderException: NSS module not available: fips
> 	at jdk.crypto.cryptoki/sun.security.pkcs11.SunPKCS11.<init>(SunPKCS11.java:278)
> 	at jdk.crypto.cryptoki/sun.security.pkcs11.SunPKCS11$1.run(SunPKCS11.java:113)
> 	at jdk.crypto.cryptoki/sun.security.pkcs11.SunPKCS11$1.run(SunPKCS11.java:110)
> 	at java.base/java.security.AccessController.doPrivileged(Native Method)
> 	at jdk.crypto.cryptoki/sun.security.pkcs11.SunPKCS11.configure(SunPKCS11.java:110)
> 	at java.base/sun.security.jca.ProviderConfig$3.run(ProviderConfig.java:247)
> 	at java.base/sun.security.jca.ProviderConfig$3.run(ProviderConfig.java:238)
> 	at java.base/java.security.AccessController.doPrivileged(Native Method)
> 	at java.base/sun.security.jca.ProviderConfig.doLoadProvider(ProviderConfig.java:238)
> 	at java.base/sun.security.jca.ProviderConfig.getProvider(ProviderConfig.java:218)
> 	at java.base/sun.security.jca.ProviderList.getProvider(ProviderList.java:266)
> 	at java.base/sun.security.jca.ProviderList.getService(ProviderList.java:379)
> 	at java.base/sun.security.jca.GetInstance.getInstance(GetInstance.java:157)
> 	at java.base/java.security.Security.getImpl(Security.java:697)
> 	at java.base/java.security.MessageDigest.getInstance(MessageDigest.java:178)
> 	at org.jboss.as.deployment-repository at 5.0.0.Alpha-redhat-20180502//org.jboss.as.repository.ContentRepositoryImpl.<init>(ContentRepositoryImpl.java:90)
> 	at org.jboss.as.deployment-repository at 5.0.0.Alpha-redhat-20180502//org.jboss.as.repository.ContentRepository$Factory.addService(ContentRepository.java:185)
> 	at org.jboss.as.server at 5.0.0.Alpha-redhat-20180502//org.jboss.as.server.ApplicationServerService.start(ApplicationServerService.java:144)
> 	at org.jboss.msc at 1.3.2.Final-redhat-1//org.jboss.msc.service.ServiceControllerImpl$StartTask.startService(ServiceControllerImpl.java:1714)
> 	at org.jboss.msc at 1.3.2.Final-redhat-1//org.jboss.msc.service.ServiceControllerImpl$StartTask.execute(ServiceControllerImpl.java:1693)
> 	... 6 more
> {code}
> In Fedora 28 there is nss 3.36.1 (dnf info nss.x86_64)
> In nss 3.35 there was switch of format to SQL [1]
> I am awaer there is probably nothing that can be done in Elytron. I think it is matter of NSS/SunPKCS11 configuration. I create this JIRA as a place for finding out what the problem is.
> [1] https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.35_release_notes



--
This message was sent by Atlassian JIRA
(v7.5.0#75005)