git: openjdk/jdk: 8325164: Named groups and signature schemes unavailable with SunPKCS11 in FIPS mode

Daniel Jeliński djelinski at openjdk.org
Wed Mar 13 19:11:37 UTC 2024


Changeset: 8f9899b2
Author:    Daniel Jeliński <djelinski at openjdk.org>
Date:      2024-03-13 19:09:52 +0000
URL:       https://git.openjdk.org/jdk/commit/8f9899b23ee46ad986bc719d3e2eec722d8d6bf8

8325164: Named groups and signature schemes unavailable with SunPKCS11 in FIPS mode

Reviewed-by: valeriep

! src/java.base/share/classes/sun/security/ec/ECKeyPairGenerator.java
! src/java.base/share/classes/sun/security/util/ECUtil.java
! src/java.base/share/classes/sun/security/util/KeyUtil.java
! src/jdk.crypto.cryptoki/share/classes/sun/security/pkcs11/P11ECKeyFactory.java
! src/jdk.crypto.cryptoki/share/classes/sun/security/pkcs11/P11KeyStore.java
! src/jdk.crypto.cryptoki/share/classes/sun/security/pkcs11/P11PSSSignature.java
! src/jdk.crypto.cryptoki/share/classes/sun/security/pkcs11/SunPKCS11.java
! test/jdk/sun/security/pkcs11/Signature/SigInteropPSS2.java
! test/jdk/sun/security/pkcs11/tls/tls12/FipsModeTLS12.java
! test/jdk/sun/security/tools/keytool/fakegen/java.base/sun/security/ec/ECKeyPairGenerator.java



More information about the jdk-changes mailing list