-
Bug
-
Resolution: Unresolved
-
Major
-
None
-
java-25-openjdk-25.0.1.0.8-3.el10
-
None
-
Important
-
ZStream
-
Customer Facing
-
rhel-sst-java
-
None
-
False
-
False
-
-
None
-
None
-
Regression Exception
-
Requested
-
None
-
Unspecified
-
Unspecified
-
Unspecified
-
-
All
-
None
libnssadaptor.so is a library that works around an NSS limitation that affects OpenJDK when it is running in FIPS mode. It is a "wrapper library" that gets loaded instead of NSS, does some setup, then loads the real NSS.
The idea is to create a security policy that points to libnssadaptor.so, overriding the normal behaviour where OpenJDK loads NSS directly. Preliminary work toward writing that policy configuration is on a branch in [~fferrari@redhat.com]'s OpenJDK fork repository.
I filed this issue to represent the need to patch the java-25-openjdk.spec file to include libnssadaptor.so.
- is cloned by
-
RHEL-131896 Create separate java-25-openjdk-crypto-adapter subpackage [rhel-10]
-
- Integration
-
- is triggering
-
RHEL-131896 Create separate java-25-openjdk-crypto-adapter subpackage [rhel-10]
-
- Integration
-
- links to
-
RHBA-2025:157126
java-25-openjdk bug fix and enhancement update