Skip to content

Conversation

@sabrinajlee
Copy link
Collaborator

Removes support for TLS key generation in OpenJCEPlus and OpenJCEPlusFIPS profiles. The internal parameter specs for these classes have been deprecated.

Signed-off-by: Sabrina Lee [email protected]

@sabrinajlee
Copy link
Collaborator Author

See the diff of the files (now deleted) from OpenJCEPlus and the same files in OpenJDK:
https://github.com/IBM/OpenJCEPlus/compare/main...sabrinajlee:OpenJCEPlus:main-compare-TLS?expand=1

Copy link
Member

@jasonkatonica jasonkatonica left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

One other question came to mind here.

Do we know that when JSSE is running in FIPS mode on Semeru does the TLS connections still work? Semeru currently blocks man algorithms in FIPS mode and allows explictly the registration of the algorithms being removed here . Perhaps testing has already been done enabling these algorithms from other locations than OpenJCEPlusFIPS provider.

Removes support for TLS key generation in OpenJCEPlus and
OpenJCEPlusFIPS profiles. The internal parameter specs for these classes
have been deprecated.

Signed-off-by: Sabrina Lee <[email protected]>
@sabrinajlee sabrinajlee force-pushed the main-remove-TLS-support branch from 1b8cc20 to 8b4c676 Compare December 8, 2025 16:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants