Uploaded image for project: 'OpenJDK'
  1. OpenJDK
  2. OPENJDK-934

FIPS on OpenJDK 17 September Update

XMLWordPrintable

    • Icon: Component Upgrade Component Upgrade
    • Resolution: Done
    • Icon: Major Major
    • None
    • 17.0.4.GA
    • FIPS
    • False
    • Hide

      None

      Show
      None
    • False

      A number of new features for the FIPS support in our OpenJDK packages will be added in the period between the July and October security updates.

      These features are only targeted for the most recent JDK, java-17-openjdk, at present. Updates for java-11-openjdk & java-1.8.0-openjdk will follow once the changes are stable in java-17-openjdk.

      The planned features are currently:

      • Key export support
      • PKCS#12 support
      • TLS v1.3 support
      • Avoid import/export of DH private keys
      • P11Key.getEncoded does not work for DH keys in FIPS mode

      Update 2022-08-24: Moved to align with interim 17.0.4.1 release going out in RHEL 8.6 on 2022-09-13. Changes need to be in 8.6 and erratum in REL_PREP by 2022-09-05.

          1.
          		 Sync FIPS changes to portable builds Sub-task Closed Major Jayashree Huttanagoudar
          2.
          		 Create FIPS August Update Errata Sub-task Closed Major Andrew Hughes
          3.
          		 Update Mandrel JDK 17-based image with OpenJDK supporting PKCS12 in FIPS Sub-task Closed Major Severin Gehwolf

              rhn-engineering-ahughes Andrew Hughes
              rhn-engineering-ahughes Andrew Hughes
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated:
                Resolved: