diff --git a/create-redhat-properties-files.bash b/create-redhat-properties-files.bash index 60264f2..7b02edf 100644 --- a/create-redhat-properties-files.bash +++ b/create-redhat-properties-files.bash @@ -109,16 +109,6 @@ security.provider.8= keystore.type=pkcs12 EOF -# /usr/lib/jvm/java-25-openjdk/conf/security/redhat/fips.properties -# For now, this prevents an include cycle on JDKs that do not support -# ${__redhat_fips__}. In the future the goal is for it be overwritten -# (based on /proc/sys/crypto/fips_enabled) at FIPS configuration time -# (by fips-mode-setup or by grubby), at RPM install time by a -# post-install hook, and/or during boot by a systemd oneshot service. -install --mode 644 /dev/stdin "${VENDOR}"/fips.properties <<'EOF' -include false/fips.properties -EOF - cat >> "${SECURITY}"/java.security <<'EOF' # diff --git a/java-25-openjdk.spec b/java-25-openjdk.spec index cb3c03f..0208451 100644 --- a/java-25-openjdk.spec +++ b/java-25-openjdk.spec @@ -887,7 +887,6 @@ fi # are implementation details -- so leave them as not config-noreplace %config %{etcjavadir -- %{?1}}/conf/security/redhat/false/crypto-policies.properties %config %{etcjavadir -- %{?1}}/conf/security/redhat/true/crypto-policies.properties -%config %{etcjavadir -- %{?1}}/conf/security/redhat/fips.properties %config %{etcjavadir -- %{?1}}/conf/security/redhat/false/fips.properties %config %{etcjavadir -- %{?1}}/conf/security/redhat/true/fips.properties %config(noreplace) %{etcjavadir -- %{?1}}/conf/management/jmxremote.access @@ -2639,7 +2638,9 @@ exit 0 * Mon Dec 08 2025 Thomas Fitzsimmons - 1:25.0.1.0.8-2 - Add java-25-openjdk-crypto-adapter subpackage - Update library setting in create-redhat-properties-files.bash +- Remove /usr/lib/jvm/java-25-openjdk/conf/security/redhat/fips.properties - Resolves: RHEL-132520 +- Resolves: RHEL-132523 * Fri Nov 28 2025 Andrew Hughes - 1:25.0.1.0.8-1 - Pass ourflags and ourldflags into the nssadapter build using CFLAGS & LDFLAGS