A number of new features for the FIPS support in our OpenJDK packages will be added in the period between the July and October security updates.

These features are only targeted for the most recent JDK, java-17-openjdk, at present. Updates for java-11-openjdk & java-1.8.0-openjdk will follow once the changes are stable in java-17-openjdk.

The planned features are currently:

• Key export support
• PKCS#12 support
• TLS v1.3 support
• Avoid import/export of DH private keys
• P11Key.getEncoded does not work for DH keys in FIPS mode

Update 2022-08-24: Moved to align with interim 17.0.4.1 release going out in RHEL 8.6 on 2022-09-13. Changes need to be in 8.6 and erratum in REL_PREP by 2022-09-05.