Code

Support for FIPS compliance mode#14912

Code

Open

beanuwave wants to merge 19 commits intoopensearch-project:mainopensearch-project/OpenSearch:mainfrom sternadsoftware:fips_compliance2sternadsoftware/OpenSearch:fips_compliance2Copy head branch name to clipboard

+2,235-1,032

Commits

Commits on Feb 20, 2025

• Draft to allow run in FIPS compliace mode

  Show description for 92aa408
  iigonin

  committed
  92aa408

  Copy full SHA for 92aa408

• make tests run without BC (not BCFIPS) libraries.

  Show description for abdfe72
  iigonin

  committed
  abdfe72

  Copy full SHA for abdfe72

• disable approved-only mode for launch configuration of testcluster

  Show description for dcffe2b
  iigonin

  committed
  dcffe2b

  Copy full SHA for dcffe2b

• update all BC libraries to support JAVA 21

  Show description for cffb257
  iigonin

  committed
  cffb257

  Copy full SHA for cffb257

• try to pass bwc staged build by adding expected version

  Show description for 142068a
  iigonin

  committed
  142068a

  Copy full SHA for 142068a

• ensure FIPS-mode can be enabled by fixing existent and creating additional tests.

  Show description for 3eccd6e
  iigonin

  committed
  3eccd6e

  Copy full SHA for 3eccd6e

• fixing additional tests.

  Show description for a4e0e74
  iigonin

  committed
  a4e0e74

  Copy full SHA for a4e0e74

• Configure FIPS mode through global ENV VAR instead of thread-based.

  Show description for 851f8b4
  iigonin

  committed
  851f8b4

  Copy full SHA for 851f8b4

• write some additional unit tests.

  Show description for e2276e9
  iigonin

  committed
  e2276e9

  Copy full SHA for e2276e9

• test SystemJvmOptions.java & replace FIPS-140-2 by FIPS-140-3

  Show description for 25213cb
  iigonin

  committed
  25213cb

  Copy full SHA for 25213cb

• categorize JKS keystore as untrusted

  Show description for 9b7ea4f
  iigonin

  committed
  9b7ea4f

  Copy full SHA for 9b7ea4f

• general exclusion of keystore binaries and certificates from fobiddenPattern

  Show description for 2e95da5
  iigonin

  committed
  2e95da5

  Copy full SHA for 2e95da5

• Kerberos, forbiddenApis, SecureRandom, SunJCE, AzureTests

  Show description for e3a830c
  iigonin

  committed
  e3a830c

  Copy full SHA for e3a830c

• remove BC libs from 'libs:common'; revert SecureRandomHolder

  Show description for bf49295
  iigonin

  committed
  bf49295

  Copy full SHA for bf49295

• loosen some direct BC dependencies

  Show description for 3dd921e
  iigonin

  committed
  3dd921e

  Copy full SHA for 3dd921e

• set default testcluster password for all project modules

  Show description for 09a7fc1
  iigonin

  committed
  09a7fc1

  Copy full SHA for 09a7fc1

• build with 'crypto.standard' gradle build parameter

  Show description for 55d6f6b
  iigonin

  committed
  55d6f6b

  Copy full SHA for 55d6f6b

• run REST-tests with JKS & BCFKS keystores

  Show description for 96524cf
  iigonin

  committed
  96524cf

  Copy full SHA for 96524cf

Commits on Feb 28, 2025

• merge with main

  

  Igonin

  committed
  1e6ae86

  Copy full SHA for 1e6ae86