Merge pull request #35 from WilburZjh/SignInitFix

Fix the PKCS11Exception: CKR_KEY_TYPE_INCONSISTENT in FIPS mode
ibmruntimes · Oct 11, 2022 · 9119c55 · 9119c55
2 parents 629c463 + 2b2697b
commit 9119c55
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/closed/src/java.base/share/conf/security/nss.fips.cfg b/closed/src/java.base/share/conf/security/nss.fips.cfg
@@ -23,3 +23,5 @@ nssLibraryDirectory = /usr/lib64
 nssSecmodDirectory = /etc/pki/nssdb
 nssDbMode = readOnly
 nssModule = fips
+
+attributes(*,CKO_SECRET_KEY,CKK_GENERIC_SECRET)={ CKA_SIGN=true }