Project

General

Profile

« Previous | Next » 

Revision b9667a02

Added by Evgeni Golov 15 days ago

Fixes #37384 - properly pass fips=false when checking keystore

In a FIPS-enabled environment, calling `keytool -list` with a wrong
password doesn't yield an error, unless we also pass `fips=false` like
we do when creating the keystore:

  1. keytool -list -keystore ./store -storepass wrong-password
    Keystore type: PKCS11
    Keystore provider: SunPKCS11-NSS-FIPS
Your keystore contains 0 entries

Passing `fips=false` makes it correctly raise the expected exception:

  1. keytool -list -keystore ./store -storepass wrong-password -J-Dcom.redhat.fips=false
    keytool error: java.io.IOException: keystore password was incorrect

Fixes: 6fea0bbb4143ca439cff01bf9f0e54cf88140d10

  • added
  • modified
  • copied
  • renamed
  • deleted