Uploaded image for project: 'OpenAM'
  1. OpenAM
  2. OPENAM-14634

Remove the dead FIPS for Oracle JRE links.

    Details

    • Needs backport:
      No
    • Needs QA verification:
      No
    • Functional tests:
      No
    • Are the reproduction steps defined?:
      No (add reasons in the comment)

      Description

      Network Security Services for Java (JSS) has been removed from OpenAM. As a result, OpenAM no longer provides native support for Federal Information Processing Standard (FIPS) mode.
      
      FIPS mode should instead be provided by your JRE. 
      Use the following links for more information about enabling FIPS support:
      
      Oracle JRE
      https://docs.oracle.com/javase/8/docs/technotes/guides/security/jsse/FIPS.html
      

      Goes to a bogus 404 link.

      Outlined in:
      https://bugs.openjdk.java.net/browse/JDK-8186096
      &
      https://bugs.openjdk.java.net/browse/JDK-8176793?jql=text%20~%20%22FIPS%20140-2%22

      We should just update this to go to our current FIPS document or a brief explanation on the underlying JSSE. Oracle docs don't go that far into things anymore.
      https://backstage.forgerock.com/knowledge/se/article/a70972243

        Attachments

          Activity

            People

            • Assignee:
              austingene Gene Hirayama
              Reporter:
              jeremy.cocks Jeremy Cocks
            • Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: