[
https://issues.apache.org/jira/browse/QPID-8780?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Partha Sarathy Maripini updated QPID-8780:
------------------------------------------
Description: Review the design of the certificate generator SPI (QPID-8774
to QPID-8778) with the community. The design, including module, class,
selection and sequence diagrams, is described in the pull request. (was:
*Background:*
Before implementing code changes for FIPS compliance, the proposed architecture
for SPI extraction, module decoupling, dynamic provider selection, and JVM
isolation must be documented, reviewed, and formally approved by Apache Qpid
maintainers on QPID-8773.
*Tasks:*
1. Draft a comprehensive design proposal documenting:
- The CertificateGeneratorProvider SPI definition and generic exception
hierarchy in broker-core.
- Plugin discovery via QpidServiceLoader / PluggableFactoryLoader and
configuration property lifecycle.
- Strategy for passing explicit Provider instances to avoid global JVM state
mutation via Security.addProvider().
- Thread-local FIPS mode isolation and side-effect-free plugin discovery.
- Classpath isolation strategy separating standard Bouncy Castle
(bcprov-jdk*) and BC-FIPS dependencies.
2. Publish the design proposal as a structured comment/attachment on QPID-8773
(and notify [email protected] if required).
3. Address maintainer feedback and refine design details based on review
comments.
4. Obtain formal consensus and approval from Qpid committers before submitting
Pull Requests.
*Acceptance Criteria:*
- Design document is published on QPID-8773 detailing SPI boundaries,
configuration, and build/dependency separation.
- All reviewer concerns regarding JVM registry mutations, thread isolation, and
classpath conflicts are addressed.
- Formal committer approval/consensus is granted on the ticket.)
> [Broker-J] Finalize FIPS certificate generation SPI design and obtain
> community approval
> ----------------------------------------------------------------------------------------
>
> Key: QPID-8780
> URL: https://issues.apache.org/jira/browse/QPID-8780
> Project: Qpid
> Issue Type: Sub-task
> Components: Broker-J
> Reporter: Partha Sarathy Maripini
> Priority: Major
>
> Review the design of the certificate generator SPI (QPID-8774 to QPID-8778)
> with the community. The design, including module, class, selection and
> sequence diagrams, is described in the pull request.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
