Skip to content

Conversation

tloodu
Copy link
Member

@tloodu tloodu commented Aug 29, 2025


  • Removed Semeru FIPS profile in com.ibm.ws.security.social_fat.LibertyOP.2 and com.ibm.ws.security.oidc.server_fat.jaxrs.config.noOP
  • Updated NoOPEncryptionRSServerTests.java and Social_EncryptionTests.java
    • Disabled tests using JWEs configured with RSA-OAEP from running when FIPS 140-3 is enabled on Semeru
    • Created/enabled alternative test JWEs using ECDH-ES
  • Created new server configurations for new tests.

@tloodu tloodu self-assigned this Aug 29, 2025
@tloodu
Copy link
Member Author

tloodu commented Aug 29, 2025

!build (view Open Liberty Personal Build - ❌ completed with errors/failures.)

Note: Target locations of links might be accessible only to IBM employees.

@LibbyBot
Copy link
Member

Code analysis and actions

DO NOT DELETE THIS COMMENT.
  • 6 FAT files were changed, added, or removed.

  • Check that the build did not break the affected FAT suite(s).

  • 6 test infrastructure code files were changed.

  • Test failures/errors in the build could be due to these changes.

  • Please describe in a separate comment how you tested your changes.

@tloodu
Copy link
Member Author

tloodu commented Aug 29, 2025

!build (view Open Liberty Personal Build - ❌ completed with errors/failures.)

Note: Target locations of links might be accessible only to IBM employees.

@LibbyBot
Copy link
Member

Code analysis and actions

DO NOT DELETE THIS COMMENT.
  • 6 FAT files were changed, added, or removed.

  • Check that the build did not break the affected FAT suite(s).

  • 6 test infrastructure code files were changed.

  • Test failures/errors in the build could be due to these changes.

  • Please describe in a separate comment how you tested your changes.

@tloodu
Copy link
Member Author

tloodu commented Aug 30, 2025

!build (view Open Liberty Personal Build - ❌ completed with errors/failures.)

Note: Target locations of links might be accessible only to IBM employees.

@LibbyBot
Copy link
Member

Code analysis and actions

DO NOT DELETE THIS COMMENT.
  • 6 FAT files were changed, added, or removed.

  • Check that the build did not break the affected FAT suite(s).

  • 6 test infrastructure code files were changed.

  • Test failures/errors in the build could be due to these changes.

  • Please describe in a separate comment how you tested your changes.

@tloodu tloodu force-pushed the remove-rsaOaep-FipsProfile branch from b97d789 to 41632e3 Compare August 31, 2025 14:43
@tloodu
Copy link
Member Author

tloodu commented Aug 31, 2025

!build (view Open Liberty Personal Build - ❌ completed with errors/failures.)

Note: Target locations of links might be accessible only to IBM employees.

@LibbyBot
Copy link
Member

Code analysis and actions

DO NOT DELETE THIS COMMENT.
  • 6 FAT files were changed, added, or removed.

  • Check that the build did not break the affected FAT suite(s).

  • 6 test infrastructure code files were changed.

  • Test failures/errors in the build could be due to these changes.

  • Please describe in a separate comment how you tested your changes.

@tloodu
Copy link
Member Author

tloodu commented Sep 2, 2025

Errors in PB are related to the com.ibm.ws.collective.controller.crypto_zfat bucket which has been triaged is not affected by the changes made in this PR.

@tloodu
Copy link
Member Author

tloodu commented Sep 2, 2025

Custom SOE Results: https://libh-proxy1.fyre.ibm.com/cognitive/pipelineAnalysis.html?pipelineId=21bbe11b-2960-4bcf-a25a-ee24a1e20d93&tab=Steps

Run on a non-FIPS platform, FIPS 140-3 on Java 8 and FIPS 140-3 on Semeru. Buckets modified in this PR pass all tests, and there are no other unexpected errors.

@tloodu tloodu marked this pull request as ready for review September 3, 2025 13:20
Copy link
Member

@abutch3r abutch3r left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

All these buckets passed in the requested FIPS SOE platforms and in the PB(non-fips scenarios).

None of the other failures could be put down to these changes

@tloodu tloodu merged commit 05ad58f into OpenLiberty:integration Sep 3, 2025
2 of 3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants