Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Adapt for Ubuntu Pro 22.04 #32

Merged
merged 4 commits into from
Sep 13, 2024
Merged

Adapt for Ubuntu Pro 22.04 #32

merged 4 commits into from
Sep 13, 2024

Conversation

pushkarnk
Copy link
Collaborator

Building and testing the provider on Ubuntu Pro 22.04 with OpenJDK 21 led to some failures. This pull request contains the fixes. Here is a summary of the changes:

  1. Loading openssl on Ubuntu Pro with fips-updates enabled loads the FIPS module by default. 1107caa handles this scenario.
  2. There is a lack of clarity on the FIPS approval of Ed25519 and Ed448 digital signatures. Though DSS 186-5 permits these digital signing algorithms, the FIPS module of openssl on Ubuntu 22.04 does not permit the creation of Ed25519 and Ed448 keys. However, I can see upstream openssl permitting the same. I have disabled these algorithms from the provider until we get some clarity here. The tests have also been disabled. 318fb43 does this.
  3. Native KMAC-128 tests used a key-size of 4 which is wrong. I am not sure why this failed only with Ubuntu Pro and not with a vanilla Ubuntu 22.04 install. But nevertheless, it is fixed now by 48e5519.
  4. The GitHub action is updated to use upstream openssl 3.0.2 which is the level shipped by Ubuntu Pro 22.04. We are also now doing an explicit install of the FIPS module, to make sure the default module does not get loaded.

@pushkarnk pushkarnk merged commit 38946a1 into main Sep 13, 2024
1 check passed
@pushkarnk
Copy link
Collaborator Author

CI passed. Merging.

@pushkarnk pushkarnk deleted the action-ubuntu-pro-22.04 branch September 30, 2024 11:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant