Fix the PKCS11Exception: CKR_KEY_TYPE_INCONSISTENT in FIPS mode

[WilburZjh]

Refer to Redhat-2007331. Add a CKA_SIGN attribute to a key that is generated by the MAC service initialization in the FIPS mode.

Signed-off-by: Jinhang Zhang Jinhang.Zhang@ibm.com

[WilburZjh]

This PR aims to solve the following exception:

com.ibm.cloud.objectstorage.SdkClientException: Unable to calculate a request signature: Unable to calculate a request signature: init() failed
	at com.ibm.cloud.objectstorage.auth.AbstractAWSSigner.sign(AbstractAWSSigner.java:109)
	at com.ibm.cloud.objectstorage.auth.AWS4Signer.newSigningKey(AWS4Signer.java:643)
	at com.ibm.cloud.objectstorage.auth.AWS4Signer.deriveSigningKey(AWS4Signer.java:408)
	at com.ibm.cloud.objectstorage.auth.AWS4Signer.presignRequest(AWS4Signer.java:313)
	at com.ibm.cloud.objectstorage.services.s3.AmazonS3Client.generatePresignedUrl(AmazonS3Client.java:3553)
	at com.ibm.catalog.unified.storage.BluemixS3Connection.generatePreSignedURL(BluemixS3Connection.java:959)
	at com.ibm.catalog.unified.storage.BluemixS3Connection.generatePreSignedURL(BluemixS3Connection.java:109)
	at com.ibm.catalog.v2.controllers.AttachmentController.addURLsToResponse(AttachmentController.java:502)
	at com.ibm.catalog.v2.controllers.AttachmentController.processGetRemoteAttachment(AttachmentController.java:1289)
	at com.ibm.catalog.unified.controllers.AttachmentControllerBase.retrieveAttachment(AttachmentControllerBase.java:698)
	at com.ibm.catalog.v2.services.AttachmentServiceNew.retrieveAttachmentNewV2(AttachmentServiceNew.java:248)
	... ...
Caused by: com.ibm.cloud.objectstorage.SdkClientException: Unable to calculate a request signature: init() failed
	at com.ibm.cloud.objectstorage.auth.AbstractAWSSigner.sign(AbstractAWSSigner.java:132)
	at com.ibm.cloud.objectstorage.auth.AbstractAWSSigner.sign(AbstractAWSSigner.java:105)
	... 57 more
Caused by: java.security.InvalidKeyException: init() failed
	at sun.security.pkcs11.P11Mac.engineInit(Unknown Source)
	at java.base/javax.crypto.Mac.chooseProvider(Unknown Source)
	at java.base/javax.crypto.Mac.init(Unknown Source)
	at com.ibm.cloud.objectstorage.auth.AbstractAWSSigner.sign(AbstractAWSSigner.java:127)
	... 58 more
Caused by: sun.security.pkcs11.wrapper.PKCS11Exception: CKR_KEY_TYPE_INCONSISTENT
	at jdk.crypto.cryptoki/sun.security.pkcs11.P11Mac.initialize(Unknown Source)
	... 62 more

[WilburZjh]

it is essentially a duplicate of a bug at Redhat-2007331

[WilburZjh]

@alon-sh please help to review

[WilburZjh]

This sun.security.pkcs11.wrapper.PKCS11Exception: CKR_KEY_TYPE_INCONSISTENT exception shows in the following tests.

Grinder

<<javax/crypto/Mac/ByteBuffers.java.ByteBuffers>>
<<sun/security/pkcs11/Mac/MacKAT.java.MacKAT>>
<<sun/security/pkcs11/Mac/MacSameTest.java.MacSameTest>>
<<sun/security/pkcs11/Mac/ReinitMac.java>>
<<sun/security/pkcs11/tls/TestPRF.java.TestPRF>>

[pshipton]

Approving based on the reviews in ibmruntimes/openj9-openjdk-jdk11#581