Re: SunPKCS11's Secmod and external modules in FIPS mode

2020-01-23 Thread Martin Balao
Hi Sean, On 1/21/20 5:47 PM, Sean Mullan wrote: > > I asked around but no-one can quite recall why the fips variable was set > this way. Our best guess is that it was set this way as we did not have > any tests for this use case. > > I don't have any issue with changing this. However, is there a

Re: SunPKCS11's Secmod and external modules in FIPS mode

2020-01-21 Thread Sean Mullan
Hi Martin, I asked around but no-one can quite recall why the fips variable was set this way. Our best guess is that it was set this way as we did not have any tests for this use case. I don't have any issue with changing this. However, is there a way you could provide some tests (ex: on lin

Re: SunPKCS11's Secmod and external modules in FIPS mode

2020-01-20 Thread Martin Balao
Ping. Any hint about this? Thanks, Martin.- On 12/20/19 10:03 PM, Martin Balao wrote: > Hello, > > SunPKCS11's Secmod in OpenJDK does not allow modules other than the NSS > Software Token to be configured in FIPS mode [1]. To give some context, > NSS represents modules internally with a structur