Uploaded image for project: 'JBoss Enterprise Application Platform'
  1. JBoss Enterprise Application Platform
  2. JBEAP-24104

(docs) Add a warning for credential store with FIPS enabled RHEL

    XMLWordPrintable

Details

    • Task
    • Resolution: Unresolved
    • Major
    • None
    • None
    • Documentation, Security
    • None
    • False
    • None
    • False

    Description

      Add a warning with information that when running on RHEL in FIPS mode with preconfigured fips providers and preconfigured `/etc/pki/nssdb` , the credential store of type PKCS#11 cannot have an alias added. This will be resolved in future releases of red hat build of JDK.

      EDIT: credential store can have alias added when mode is changed to readWrite, but the provider SunJCE has to be added to the set of providers

      Attachments

        Issue Links

          is related to

          Bug - A problem that impairs or prevents the functions of the product. ELY-2456 Cannot add alias to PKCS11 credential store in FIPS enabled RHEL

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Open

          Activity

            People

              sraghupu Sangeeta Raghu-Punnadi
              dvilkola@redhat.com Diana Krepinska
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated: