RFR: 8285624: jpackage fails to create exe, msi when Windows OS is in FIPS mode
Alexey Semenyuk
asemenyuk at openjdk.org
Thu Feb 13 13:00:12 UTC 2025
On Thu, 13 Feb 2025 12:43:57 GMT, Alexey Semenyuk <asemenyuk at openjdk.org> wrote:
> Make jpackage capable of using wix3 when Federal Information Processing Standard (FIPS) mode is enabled on Windows.
>
> When FIPS mode is enabled, running `candle.exe -?` prints:
>
> candle.exe : error CNDL0308 : The Federal Information Processing Standard (FIPS) appears to be enabled on the machine. You must either disable FIPS or use FIPS-compliant security algorithms to generate IDs by passing the -fips command-line switch or by setting <FipsCompliant>true</FipsCompliant> in your .wixproj project.
>
> Though jpackage expects the following output:
>
> Microsoft (R) Windows Installer Xml Compiler version 3.5.2519.0
> Copyright (C) Microsoft Corporation. All rights reserved.
>
> usage: candle.exe [-?] [-nologo] [-out outputFile] sourceFile [sourceFile ...] [@responseFile]
>
> ...
>
>
> candle.exe also exits with an error code (308).
>
> To workaround the problem, run `candle.exe -fips` to make it print standard help output regardless FIPS mode enable/disable.
>
> Run candle.exe the second time to detect if it requires an `-fips` command line switch. If it does, jpackage will add it automatically.
@sashamatveev PTAL
-------------
PR Comment: https://git.openjdk.org/jdk/pull/23612#issuecomment-2656521943
More information about the core-libs-dev
mailing list