Merge pull request #622 from WilburZjh/SignInitFix

Fix the PKCS11Exception: CKR_KEY_TYPE_INCONSISTENT in FIPS mode
ibmruntimes · Oct 11, 2022 · 65d61b6 · 65d61b6
2 parents a658485 + 33b5eff
commit 65d61b6
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/closed/adds/jdk/src/share/lib/security/nss.fips.cfg b/closed/adds/jdk/src/share/lib/security/nss.fips.cfg
@@ -23,3 +23,5 @@ nssLibraryDirectory = /usr/lib64
 nssSecmodDirectory = /etc/pki/nssdb
 nssDbMode = readOnly
 nssModule = fips
+
+attributes(*,CKO_SECRET_KEY,CKK_GENERIC_SECRET)={ CKA_SIGN=true }