-
Bug
-
Resolution: Unresolved
-
Major
-
None
-
None
-
Important
-
Customer Facing
-
rhel-sst-java
-
None
-
False
-
False
-
-
None
-
None
-
None
-
None
-
Unspecified
-
Unspecified
-
Unspecified
-
-
All
-
None
libnssadaptor.so is a library that works around an NSS limitation that affects OpenJDK when it is running in FIPS mode. It is a "wrapper library" that gets loaded instead of NSS, does some setup, then loads the real NSS.
The idea is to create a security policy that points to libnssadaptor.so, overriding the normal behaviour where OpenJDK loads NSS directly. Preliminary work toward writing that policy configuration is on a branch in [~fferrari@redhat.com]'s OpenJDK fork repository.
I filed this issue to represent the need to patch the java-25-openjdk.spec file to include libnssadaptor.so.