From fe4f362a85b94680f5101517827adf821f9fbc4b Mon Sep 17 00:00:00 2001 From: Kostas Tsiounis Date: Mon, 30 Sep 2024 13:56:41 -0400 Subject: [PATCH] Update profile hash and remove lines --- src/java.base/share/conf/security/java.security | 7 +------ 1 file changed, 1 insertion(+), 6 deletions(-) diff --git a/src/java.base/share/conf/security/java.security b/src/java.base/share/conf/security/java.security index 45b4a00aaad..75548087ba2 100644 --- a/src/java.base/share/conf/security/java.security +++ b/src/java.base/share/conf/security/java.security @@ -212,13 +212,12 @@ RestrictedSecurity.NSS.140-2.securerandom.algorithm = PKCS11 RestrictedSecurity.OpenJCEPlusFIPS.FIPS140-3.desc.name = OpenJCEPlusFIPS Cryptographic Module FIPS 140-3 RestrictedSecurity.OpenJCEPlusFIPS.FIPS140-3.desc.default = false RestrictedSecurity.OpenJCEPlusFIPS.FIPS140-3.desc.fips = true -RestrictedSecurity.OpenJCEPlusFIPS.FIPS140-3.desc.hash = SHA256:4a85dc0db2f257388155b3ada7378773884edc89c80c8d715f4bdde84cc3d8bd +RestrictedSecurity.OpenJCEPlusFIPS.FIPS140-3.desc.hash = SHA256:e4bbf5d51a953aef91f6c8fc56f9a9d8eb508f3cfe01e33a1c0354913757a4a2 RestrictedSecurity.OpenJCEPlusFIPS.FIPS140-3.desc.number = Certificate #XXX RestrictedSecurity.OpenJCEPlusFIPS.FIPS140-3.desc.policy = https://csrc.nist.gov/projects/cryptographic-module-validation-program/certificate/ RestrictedSecurity.OpenJCEPlusFIPS.FIPS140-3.desc.sunsetDate = 2026-09-21 RestrictedSecurity.OpenJCEPlusFIPS.FIPS140-3.fips.mode = 140-3 -RestrictedSecurity.OpenJCEPlusFIPS.FIPS140-3.tls.disabledNamedCurves = RestrictedSecurity.OpenJCEPlusFIPS.FIPS140-3.tls.disabledAlgorithms = + \ DH keySize < 2048, \ TLS_DHE_DSS_WITH_AES_128_CBC_SHA, \ @@ -246,11 +245,7 @@ RestrictedSecurity.OpenJCEPlusFIPS.FIPS140-3.tls.disabledAlgorithms = + \ TLS_RSA_WITH_AES_256_GCM_SHA384, \ X25519, \ X448 -RestrictedSecurity.OpenJCEPlusFIPS.FIPS140-3.tls.ephemeralDHKeySize = -RestrictedSecurity.OpenJCEPlusFIPS.FIPS140-3.tls.legacyAlgorithms = -RestrictedSecurity.OpenJCEPlusFIPS.FIPS140-3.jce.certpath.disabledAlgorithms = -RestrictedSecurity.OpenJCEPlusFIPS.FIPS140-3.jce.legacyAlgorithms = RestrictedSecurity.OpenJCEPlusFIPS.FIPS140-3.jce.provider.1 = com.ibm.crypto.plus.provider.OpenJCEPlusFIPS [ \ {AlgorithmParameterGenerator, AESGCM, *}, \ {AlgorithmParameterGenerator, CCM, *}, \