Commit - rpms/java-latest-openjdk - 22ccd86c4501ce21007ef6b0b2639fb9660b9bd1

pmikova / rpms / java-latest-openjdk

Forked from rpms/java-latest-openjdk a year ago

`22ccd86` RH2007331: SecretKey generate/import operations don't add the CKA_SIGN attribute in FIPS mode

2 files Authored by fferrari 2 years ago, Committed by pmikova 2 years ago,

raw patch tree parent

2 files changed. 6 lines added. 1 lines removed.

java-latest-openjdk.spec

    RH2007331: SecretKey generate/import operations don't add the CKA_SIGN attribute in FIPS mode
    
    Use SunPKCS11 Attributes Configuration to set CKA_SIGN=true on SecretKey generate/import operations in FIPS mode, see:
    https://docs.oracle.com/en/java/javase/17/security/pkcs11-reference-guide1.html#GUID-C4ABFACB-B2C9-4E71-A313-79F881488BB9__PKCS11-ATTRIBUTES-CONFIGURATION

java-latest-openjdk.spec

file modified

+4 -1

nss.fips.cfg.in

file modified

+2 -0

pmikova / rpms / java-latest-openjdk

Source Code

22ccd86 RH2007331: SecretKey generate/import operations don't add the CKA_SIGN attribute in FIPS mode

2 files Authored by fferrari 2 years ago, Committed by pmikova 2 years ago,

`22ccd86` RH2007331: SecretKey generate/import operations don't add the CKA_SIGN attribute in FIPS mode