ffang commented on PR #1893: URL: https://github.com/apache/cxf/pull/1893#issuecomment-2133605678
> FIPS mode enabled on Stream 9 OS: > > ` [jgoodyear@localhost cxf]$ fips-mode-setup --check > > FIPS mode is enabled. > > [jgoodyear@localhost ~]$ uname -a > > Linux localhost.localdomain 5.14.0-447.el9.ppc64le #1 SMP Tue May 7 10:29:50 UTC 2024 ppc64le ppc64le ppc64le GNU/Linux ` > > Invocation: > > `[jgoodyear@localhost cxf]$ mvn clean install -Dsemeru.fips=true -Pfips` > > Error Message: > > ` [INFO] > > [INFO] --- surefire:3.2.5:test (default-test) @ cxf-core --- > > [INFO] Using auto detected provider org.apache.maven.surefire.junit4.JUnit4Provider > > [INFO] > > [INFO] ------------------------------------------------------- > > [INFO] T E S T S > > [INFO] ------------------------------------------------------- > > java.lang.RuntimeException: Restricted security mode is not supported on this platform. ` > > Maven/Java versions: > > ` [jgoodyear@localhost cxf]$ mvn -version > > Apache Maven 3.9.6 (bc0240f3c744dd6b6ec2920b3cd08dcc295161ae) > > Maven home: /home/jgoodyear/Documents/x1/maven/apache-maven-3.9.6 > > Java version: 17.0.8.1, vendor: IBM Corporation, runtime: /usr/lib/jvm/ibm-semeru-open-17-jdk > > Default locale: en_US, platform encoding: UTF-8 > > OS name: "linux", version: "5.14.0-447.el9.ppc64le", arch: "ppc64le", family: "unix" ` > > Its very possible I do not have a complete FIPS configuration for this system, that being said, enabling FIPS on the OS, and passing to Semeru fips=true should be the out of the box requirement for basic use. Any pointers welcome :) > > This is a very cool feature to support for CXF. Hi @jgoodyear , Thanks for testing with this PR. I'm not sure how to configure the environment you are using. Just FYI, my FIPS testing machine is like Maven home: /tools/opt/apache-maven-3.8.6 Java version: 21.0.2, vendor: Red Hat, Inc., runtime: /usr/lib/jvm/java-21-openjdk-21.0.2.0.13-1.el8.x86_64 Default locale: en_CA, platform encoding: UTF-8 OS name: "linux", version: "4.18.0-477.27.1.el8_8.x86_64", arch: "amd64", family: "unix" And If I do "mvn clean install -Pfips" I get a green build on that machine Freeman -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@cxf.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
