JDK-8029666 : Add EC certificate in PKCS11 FIPS test key and cert store
  • Type: Bug
  • Component: security-libs
  • Sub-Component: javax.crypto:pkcs11
  • Priority: P4
  • Status: Closed
  • Resolution: Duplicate
  • Submitted: 2013-12-06
  • Updated: 2019-02-11
  • Resolved: 2019-02-07
Related Reports
Duplicate :  
JDK-8217835 - Remove the experimental SunJSSE FIPS compliant mode
Description
There is no EC certificate in the key and cert store during test PKCS11 FIPS mode.  Nice to have such certificate so that we can test ECDHE_ECDSA, ECDH_ECDSA, ECDH_RSA cipher suites in FIPS mode.

See test/sun/security/pkcs11/fips/CipherTest.java
Comments
The fips mode will be removed within JDK-8217835.
07-02-2019