Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Enable testing in FIPS140 JVM #31666

Merged
merged 24 commits into from
Jul 17, 2018
Merged

Enable testing in FIPS140 JVM #31666

merged 24 commits into from
Jul 17, 2018

Commits on Jun 12, 2018

  1. Configuration menu
    Copy the full SHA
    e294ff8 View commit details
    Browse the repository at this point in the history
  2. Configuration menu
    Copy the full SHA
    3874a1d View commit details
    Browse the repository at this point in the history

Commits on Jun 13, 2018

  1. Configuration menu
    Copy the full SHA
    5f17449 View commit details
    Browse the repository at this point in the history

Commits on Jun 15, 2018

  1. Configuration menu
    Copy the full SHA
    459734d View commit details
    Browse the repository at this point in the history

Commits on Jun 28, 2018

  1. Ensure our tests can run in a FIPS JVM

    JKS keystores cannot be used in a FIPS JVM as attempting to use one
    in order to init a KeyManagerFactory or a TrustManagerFactory is not
    allowed.( JKS keystore algorithms for private key encryption are not
    FIPS 140 approved)
    This commit replaces JKS keystores in our tests with the
    corresponding PEM encoded key and certificates both for key and trust
    configurations.
    Whenever it's not possible to refactor the test, i.e. when we are
    testing that we can load a JKS keystore, etc. we attempt to
    mute the test when we are running in FIPS 140 JVM. Testing for the
    JVM is naive and is based on the name of the security provider as
    we would control the testing infrastrtucture and so this would be
    reliable enough.
    Other cases of tests being muted are the ones that involve custom
    TrustStoreManagers or KeyStoreManagers, null TLS Ciphers and the
    SAMLAuthneticator class as we cannot sign XML documents in the
    way we were doing. SAMLAuthenticator tests in a FIPS JVM can be
    reenabled with precomputed and signed SAML messages at a later stage.
    
    IT will be covered in a subsequent PR
    jkakavas committed Jun 28, 2018
    Configuration menu
    Copy the full SHA
    c2ba7f7 View commit details
    Browse the repository at this point in the history
  2. Configuration menu
    Copy the full SHA
    5e232c3 View commit details
    Browse the repository at this point in the history

Commits on Jun 29, 2018

  1. Checkstyle warnings

    jkakavas committed Jun 29, 2018
    Configuration menu
    Copy the full SHA
    534e865 View commit details
    Browse the repository at this point in the history
  2. Address feedback

    jkakavas committed Jun 29, 2018
    Configuration menu
    Copy the full SHA
    1c66768 View commit details
    Browse the repository at this point in the history

Commits on Jul 2, 2018

  1. Configuration menu
    Copy the full SHA
    5bdca0b View commit details
    Browse the repository at this point in the history
  2. Configuration menu
    Copy the full SHA
    04911a4 View commit details
    Browse the repository at this point in the history

Commits on Jul 3, 2018

  1. Address feedback

    jkakavas committed Jul 3, 2018
    Configuration menu
    Copy the full SHA
    e5009ea View commit details
    Browse the repository at this point in the history

Commits on Jul 6, 2018

  1. fix typo

    jkakavas committed Jul 6, 2018
    Configuration menu
    Copy the full SHA
    0d6b842 View commit details
    Browse the repository at this point in the history

Commits on Jul 12, 2018

  1. Add call to countdown() for the reloadLatch

    This was previously mistakenly removed in one of the refactoring
    phases.
    jkakavas committed Jul 12, 2018
    Configuration menu
    Copy the full SHA
    f6dfb02 View commit details
    Browse the repository at this point in the history
  2. Configuration menu
    Copy the full SHA
    20ce308 View commit details
    Browse the repository at this point in the history
  3. address feedback

    jkakavas committed Jul 12, 2018
    Configuration menu
    Copy the full SHA
    c2e3de6 View commit details
    Browse the repository at this point in the history
  4. Fix test

    Copy over a cert  with different size so that we are sure that the
    SSLConfiguration will be resolved. The underlying potential bug
    will be tackled in a separate issue.
    jkakavas committed Jul 12, 2018
    Configuration menu
    Copy the full SHA
    e55ea07 View commit details
    Browse the repository at this point in the history
  5. Configuration menu
    Copy the full SHA
    e114e01 View commit details
    Browse the repository at this point in the history

Commits on Jul 13, 2018

  1. Configuration menu
    Copy the full SHA
    b958d2b View commit details
    Browse the repository at this point in the history
  2. Fix failing test

    jkakavas committed Jul 13, 2018
    Configuration menu
    Copy the full SHA
    dc710f9 View commit details
    Browse the repository at this point in the history

Commits on Jul 14, 2018

  1. Configuration menu
    Copy the full SHA
    eddb426 View commit details
    Browse the repository at this point in the history
  2. Configuration menu
    Copy the full SHA
    75a73f1 View commit details
    Browse the repository at this point in the history
  3. remove import

    jkakavas committed Jul 14, 2018
    Configuration menu
    Copy the full SHA
    89cf245 View commit details
    Browse the repository at this point in the history

Commits on Jul 16, 2018

  1. Configuration menu
    Copy the full SHA
    ff9505e View commit details
    Browse the repository at this point in the history
  2. Configuration menu
    Copy the full SHA
    dcac90c View commit details
    Browse the repository at this point in the history