Partha Sarathy Maripini created QPID-8780:
---------------------------------------------
Summary: [Broker-J] Finalize FIPS certificate generation SPI
design and obtain community approval
Key: QPID-8780
URL: https://issues.apache.org/jira/browse/QPID-8780
Project: Qpid
Issue Type: Sub-task
Components: Broker-J
Reporter: Partha Sarathy Maripini
*Background:*
Before implementing code changes for FIPS compliance, the proposed architecture
for SPI extraction, module decoupling, dynamic provider selection, and JVM
isolation must be documented, reviewed, and formally approved by Apache Qpid
maintainers on QPID-8773.
*Tasks:*
1. Draft a comprehensive design proposal documenting:
- The CertificateGeneratorProvider SPI definition and generic exception
hierarchy in broker-core.
- Plugin discovery via QpidServiceLoader / PluggableFactoryLoader and
configuration property lifecycle.
- Strategy for passing explicit Provider instances to avoid global JVM state
mutation via Security.addProvider().
- Thread-local FIPS mode isolation and side-effect-free plugin discovery.
- Classpath isolation strategy separating standard Bouncy Castle
(bcprov-jdk*) and BC-FIPS dependencies.
2. Publish the design proposal as a structured comment/attachment on QPID-8773
(and notify [email protected] if required).
3. Address maintainer feedback and refine design details based on review
comments.
4. Obtain formal consensus and approval from Qpid committers before submitting
Pull Requests.
*Acceptance Criteria:*
- Design document is published on QPID-8773 detailing SPI boundaries,
configuration, and build/dependency separation.
- All reviewer concerns regarding JVM registry mutations, thread isolation, and
classpath conflicts are addressed.
- Formal committer approval/consensus is granted on the ticket.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
