Code

Fips compliance internal#2

Code

Open

beanuwave wants to merge 15 commits intomainsternadsoftware/OpenSearch:mainfrom

fips_compliance_internalsternadsoftware/OpenSearch:fips_compliance_internalCopy head branch name to clipboard

Commits

Commits on Dec 12, 2024

• Draft to allow run in FIPS compliace mode

  Show description for ab9b5ff
  iigonin

  committed
  ab9b5ff

  Copy full SHA for ab9b5ff

• make tests run without BC (not BCFIPS) libraries.

  Show description for b5eb7a0
  iigonin

  committed
  b5eb7a0

  Copy full SHA for b5eb7a0

• disable approved-only mode for launch configuration of testcluster

  Show description for c2503cd
  iigonin

  committed
  c2503cd

  Copy full SHA for c2503cd

• update all BC libraries to support JAVA 21

  Show description for fde0cb9
  iigonin

  committed
  fde0cb9

  Copy full SHA for fde0cb9

• try to pass bwc staged build by adding expected version

  Show description for ad2cc1c
  iigonin

  committed
  ad2cc1c

  Copy full SHA for ad2cc1c

• ensure FIPS-mode can be enabled by fixing existent and creating additional tests.

  Show description for 89620fe
  iigonin

  committed
  89620fe

  Copy full SHA for 89620fe

• fixing additional tests.

  Show description for cd568e0
  iigonin

  committed
  cd568e0

  Copy full SHA for cd568e0

• Configure FIPS mode through global ENV VAR instead of thread-based.

  Show description for 8cac484
  iigonin

  committed
  8cac484

  Copy full SHA for 8cac484

• write some additional unit tests.

  Show description for b15d24d
  iigonin

  committed
  b15d24d

  Copy full SHA for b15d24d

• test SystemJvmOptions.java & replace FIPS-140-2 by FIPS-140-3

  Show description for 97cb892
  iigonin

  committed
  97cb892

  Copy full SHA for 97cb892

• categorize JKS keystore as untrusted

  Show description for 20bbc77
  iigonin

  committed
  20bbc77

  Copy full SHA for 20bbc77

• general exclusion of keystore binaries and certificates from fobiddenPattern

  Show description for 00ca592
  iigonin

  committed
  00ca592

  Copy full SHA for 00ca592

Commits on Dec 13, 2024

• Kerberos, forbiddenApis, SecureRandom, SunJCE, AzureTests

  Show description for 21dd2b2
  iigonin

  committed
  21dd2b2

  Copy full SHA for 21dd2b2

• adapt ITs to run on docker from this decade + debug + local test fixes

  iigonin

  committed
  4c551aa

  Copy full SHA for 4c551aa

• pause ENV thread

  iigonin

  committed
  2d76f74

  Copy full SHA for 2d76f74