Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Cxf-soap: tests are not working in FIPS environment #5980

Merged
merged 1 commit into from
Apr 17, 2024

Conversation

JiriOndrusek
Copy link
Contributor

fixes #5979

@ppalaga I thought, that the regenaration of keystores + some additional logic handling FIPS in tests would be needed (similar to quarkiverse/quarkus-cxf#1297 and quarkiverse/quarkus-cxf#1174). With the current simple fix the test suite works in FIPS environment.

  • There are no tests verifying that non-FIPS configuration fails -> which is the reason of not requiring special handling in the test, so it is OK
  • I'm not sure about the keystores though:
  1. On one side - keystores can not be used "fully" to encrypt a message, because the proces should fail in FIPS
  2. On the other side, it is not necessary to test such usecase, because it is covered by Quarkus-cxf, which is leveraged here.

WDYT?

a. Should we keep the fix this small? (I think so)
b. Should we consider making the tests more covering (to use keystores properly)? (I'm not sure of it)

@JiriOndrusek
Copy link
Contributor Author

Failure of CI (MongoDB Grouped and Debezium) is not caused by this change

@jamesnetherton
Copy link
Contributor

@JiriOndrusek I assume this PR is still needed? If so, please rebase.

@jamesnetherton jamesnetherton merged commit 096b96d into apache:main Apr 17, 2024
24 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Cxf-soap: tests are not working in FIPS environment
3 participants