JiriOndrusek opened a new pull request, #9440: URL: https://github.com/apache/camel-quarkus/pull/9440
Fixes #9434 for JVM mode. Native mode on FIPS is not covered yet: the cxf-soap WS-Security tests fail with `NoSuchAlgorithmException: PKCS11 SecureRandom not available`. That will be a follow-up. - fips profile: on JDK 25+ limit `jdk.tls.namedGroups` to FIPS-approved groups, as in quarkiverse/quarkus-cxf#2392: Red Hat JDK 25 in FIPS mode offers the hybrid `X25519MLKEM768` first, which the SunPKCS11 FIPS provider cannot compute. Applied also to sql and jdbc/* tests. Contributor guide: FIPS build incl. the manual MAVEN_OPTS step. - crypto: SunPKCS11-FIPS on JDK 25+, RSA (keystore from @TestCertificates) instead of DSA, AES instead of DES. Under `-Dbcfips` a committed keystore is used (regenerate with `generate-certs.sh`), because the certificate generator needs non-FIPS BouncyCastle. - cxf-soap-grouped: exclude bc-fips in the fips profile (needed with -Dfips.enabled=true until CXF 4.2.5, CXF-9261). Verified on RHEL 10 FIPS (JVM): crypto, cxf-soap-grouped, http-grouped, lumberjack, as2. _Generated with [Claude Code](https://claude.com/claude-code) on behalf of @JiriOndrusek_ -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
