Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Infinispan extension needs to include Wildly SASL providers in the native executable #41677

Closed
karesti opened this issue Jul 4, 2024 · 4 comments · Fixed by #41688
Closed

Infinispan extension needs to include Wildly SASL providers in the native executable #41677

karesti opened this issue Jul 4, 2024 · 4 comments · Fixed by #41688
Assignees
@karesti
Labels
area/infinispan Infinispan area/native-image area/securepipeline issues related to ensure Quarkus can be used in a secure pipeline setups like FIPS or similar kind/bug Something isn't working
Milestone
3.8.6

Comments

@karesti
Copy link
Member

karesti commented Jul 4, 2024 •
edited
Loading

In some cases, Infinispan cannot start on FIPS enabled system and with Native mode. We need to include these classes to be loaded in the native executable.

        "org.wildfly.security.sasl.plain.WildFlyElytronSaslPlainProvider",
        "org.wildfly.security.sasl.digest.WildFlyElytronSaslDigestProvider",
        "org.wildfly.security.sasl.external.WildFlyElytronSaslExternalProvider",
        "org.wildfly.security.sasl.oauth2.WildFlyElytronSaslOAuth2Provider",
        "org.wildfly.security.sasl.scram.WildFlyElytronSaslScramProvider",
        "org.wildfly.security.sasl.gssapi.WildFlyElytronSaslGssapiProvider",
        "org.wildfly.security.sasl.gs2.WildFlyElytronSaslGs2Provider"
@karesti karesti added kind/bug Something isn't working area/infinispan Infinispan area/native-image labels Jul 4, 2024
@quarkus-bot quarkus-bot bot added the area/securepipeline issues related to ensure Quarkus can be used in a secure pipeline setups like FIPS or similar label Jul 4, 2024
@quarkus-bot quarkus-bot
Copy link

quarkus-bot bot commented Jul 4, 2024

/cc @Karm (mandrel,securepipeline), @galderz (mandrel), @jerboaa (securepipeline), @wburns (infinispan), @zakkak (mandrel,native-image)

@karesti karesti self-assigned this Jul 4, 2024
@jerboaa
Copy link
Contributor

jerboaa commented Jul 4, 2024 •
edited
Loading

@karesti Are Wildfly SASL providers known to work with the SunPKCS11 + NSS provider? That's the only one available for FIPS in native mode (for crypto primitives).

@karesti
Copy link
Member Author

karesti commented Jul 4, 2024 •
edited
Loading

@jerboaa I'm fixing a FIPS error for Infinispan with this (I should be)

@karesti karesti mentioned this issue Jul 4, 2024
Merged
@karesti
Copy link
Member Author

karesti commented Jul 4, 2024

@tristantarrant here

@quarkus-bot quarkus-bot bot added this to the 3.13 - main milestone Jul 4, 2024
@gsmet gsmet modified the milestones: 3.13 - main, 3.12.3 Jul 16, 2024
@gsmet gsmet modified the milestones: 3.12.3, 3.8.6 Aug 14, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@karesti karesti

Labels
area/infinispan Infinispan area/native-image area/securepipeline issues related to ensure Quarkus can be used in a secure pipeline setups like FIPS or similar kind/bug Something isn't working
Projects
None yet
Milestone
3.8.6
Development

Successfully merging a pull request may close this issue.

Infinispan Extension adds SASL to reflective classes karesti/quarkus
3 participants
@karesti @jerboaa @gsmet