As part of the work done for RHELPLAN-112651, we must also update the Chapter 3 of the Configuring Red Hat build of OpenJDK 17/21 on RHEL with FIPS user guides, to add the XMLDSig security provider.

I'm referring to the following chapters, currently online at the following locations:

• Chapter 3. Default FIPS configurations in Red Hat build of OpenJDK 17
• Chapter 3. Default FIPS configurations in Red Hat build of OpenJDK 21

This work should be done after the OPENJDK-988 updates to the same chapter, based on the new proposed Chapter 3.1 version, with the following suggested addition at the end of this section:

3.1. Security providers

[…]

SunJCE

• Only AlgorithmParameterGenerator, AlgorithmParameters, KeyFactory and SecretKeyFactory (except PBKDF2 algorithms) services are enabled.

SunRsaSign

• Only AlgorithmParameters and KeyFactory services are enabled.

XMLDSig

• All services are enabled. These include, TransformService, KeyInfoFactory, and XMLSignatureFactory.