Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix the PKCS11Exception: CKR_KEY_TYPE_INCONSISTENT in FIPS mode #35

Merged
merged 1 commit into from
Oct 11, 2022

Conversation

WilburZjh
Copy link
Contributor

@WilburZjh WilburZjh commented Oct 7, 2022

Refer to Redhat-2007331. Add a CKA_SIGN attribute to a key that is generated by the MAC service initialization in the FIPS mode.

@WilburZjh
Copy link
Contributor Author

WilburZjh commented Oct 7, 2022

Signed-off-by: Jinhang Zhang Jinhang.Zhang@ibm.com

@WilburZjh
Copy link
Contributor Author

@alon-sh please help to review

Refer to [Redhat-2007331](https://bugzilla.redhat.com/show_bug.cgi?id=2007331). Add a CKA_SIGN attribute to a key that is generated by the MAC service initialization in the FIPS mode.

Signed-off-by: Jinhang Zhang <Jinhang.Zhang@ibm.com>
@WilburZjh WilburZjh changed the title Fix init() function Fix the PKCS11Exception: CKR_KEY_TYPE_INCONSISTENT in FIPS mode Oct 11, 2022
@pshipton
Copy link
Member

Approving based on the reviews in ibmruntimes/openj9-openjdk-jdk11#581

@pshipton pshipton merged commit 9119c55 into ibmruntimes:openj9 Oct 11, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants