ecd7dd9860
Use SunPKCS11 Attributes Configuration to set CKA_SIGN=true on SecretKey generate/import operations in FIPS mode, see: https://docs.oracle.com/en/java/javase/11/security/pkcs11-reference-guide1.html#GUID-C4ABFACB-B2C9-4E71-A313-79F881488BB9__PKCS11-ATTRIBUTES-CONFIGURATION Resolves: rhbz#2102434
9 lines
197 B
INI
9 lines
197 B
INI
name = NSS-FIPS
|
|
nssLibraryDirectory = @NSS_LIBDIR@
|
|
nssSecmodDirectory = sql:/etc/pki/nssdb
|
|
nssDbMode = readOnly
|
|
nssModule = fips
|
|
|
|
attributes(*,CKO_SECRET_KEY,CKK_GENERIC_SECRET)={ CKA_SIGN=true }
|
|
|