Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Mute JDBC client tests with SSL in FIPS mode #66566

Merged
merged 2 commits into from
Dec 18, 2020

Conversation

jkakavas
Copy link
Member

JDBC client can only be configured for SSL with keystores,
but we can't use JKS/PKCS12 keystores in FIPS 140-2 mode.

Resolves: #66095

JDBC client can only be configured for SSL with keystores,
but we can't use JKS/PKCS12 keystores in FIPS 140-2 mode.

Resolves: elastic#66095
@jkakavas jkakavas added :Delivery/Build Build or test infrastructure >test-mute Use for PR that only mute tests labels Dec 17, 2020
@jkakavas jkakavas requested a review from mark-vieira December 17, 2020 21:40
@elasticmachine elasticmachine added the Team:Delivery Meta label for Delivery team label Dec 17, 2020
@elasticmachine
Copy link
Collaborator

Pinging @elastic/es-delivery (Team:Delivery)

// JDBC client can only be configured for SSL with keystores, but we can't use JKS/PKCS12 keystores in FIPS 140-2 mode.
if (BuildParams.inFipsJvm) {
project.tasks.configureEach {
enabled = true
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'm confused, shouldn't this be false? Also, we don't want to diasble all tasks, just Test tasks. Let's do this:

tasks.withType(Test).configureEach {
  onlyIf { BuildParams.inFipsJvm == false}
}

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'm confused, shouldn't this be false?

Copy paste error. Will address your suggestion and merge

@jkakavas jkakavas merged commit cc15a28 into elastic:master Dec 18, 2020
jkakavas added a commit to jkakavas/elasticsearch that referenced this pull request Dec 22, 2020
JDBC client can only be configured for SSL with keystores,
but we can't use JKS/PKCS12 keystores in FIPS 140-2 mode.

Resolves: elastic#66095
jkakavas added a commit to jkakavas/elasticsearch that referenced this pull request Dec 22, 2020
JDBC client can only be configured for SSL with keystores,
but we can't use JKS/PKCS12 keystores in FIPS 140-2 mode.

Resolves: elastic#66095
jkakavas added a commit to jkakavas/elasticsearch that referenced this pull request Dec 22, 2020
JDBC client can only be configured for SSL with keystores,
but we can't use JKS/PKCS12 keystores in FIPS 140-2 mode.

Resolves: elastic#66095
jkakavas added a commit that referenced this pull request Dec 22, 2020
JDBC client can only be configured for SSL with keystores,
but we can't use JKS/PKCS12 keystores in FIPS 140-2 mode.

Resolves: #66095
jkakavas added a commit that referenced this pull request Dec 22, 2020
JDBC client can only be configured for SSL with keystores,
but we can't use JKS/PKCS12 keystores in FIPS 140-2 mode.

Resolves: #66095
jkakavas added a commit that referenced this pull request Dec 22, 2020
JDBC client can only be configured for SSL with keystores,
but we can't use JKS/PKCS12 keystores in FIPS 140-2 mode.

Resolves: #66095
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
:Delivery/Build Build or test infrastructure Team:Delivery Meta label for Delivery team >test-mute Use for PR that only mute tests
Projects
None yet
Development

Successfully merging this pull request may close these issues.

[CI] :x-pack:plugin:sql:qa:jdbc:security:with-ssl:v7.10.1#bwcTest (fips) failure
3 participants