Details
-
Task
-
Status: Resolved
-
Normal
-
Resolution: Fixed
-
None
-
None
-
None
-
Froyo
-
Not Needed
-
Needs Assessment
Description
OpenSSL in JRuby is implemented via JRuby's custom jopenssl project which is based on bouncycastle. This implementation is however hardcoded to FOSS bouncycastle and will not work in a FIPS environment. Before we can operate Puppet Server in FIPS mode we must be able to load Puppet and execute the portions of Puppet's code within JRuby with OpenSSL disabled.
(Alternatives for community extensions that require OpenSSL will be evaluated once we pass this milestone)
Attachments
Issue Links
- blocks
-
SERVER-1914 Enable using FIPS Bouncy Castle crypto provider
-
- Resolved
-