Skip to content

Remove FIPS BC jars from ezbake-fips dependencies#274

Merged
bastelfreak merged 1 commit intomainfrom
fips_fix
Apr 25, 2026
Merged

Remove FIPS BC jars from ezbake-fips dependencies#274
bastelfreak merged 1 commit intomainfrom
fips_fix

Conversation

@nmburgan
Copy link
Copy Markdown
Member

@nmburgan nmburgan commented Apr 24, 2026

The FIPS BouncyCastle jars (bc-fips, bcpkix-fips, bctls-fips) cannot be in :ezbake-fips :dependencies alongside bcpkix-jdk18on because bc-fips has Sealed: true in its manifest and shares packages with bcprov-jdk18on (a transitive dependency of bcpkix-jdk18on), causing a JVM sealing violation at startup.

The FIPS jars remain in :managed-dependencies for version pinning and in :classpath-jars so ezbake copies them to staging. With the ezbake fallback for resolving classpath-jar artifacts from managed-dependencies, they no longer need to be in :dependencies.

Requires OpenVoxProject/ezbake#94

The FIPS BouncyCastle jars (bc-fips, bcpkix-fips, bctls-fips) cannot be
in :ezbake-fips :dependencies alongside bcpkix-jdk18on because bc-fips
has Sealed: true in its manifest and shares packages with bcprov-jdk18on
(a transitive dependency of bcpkix-jdk18on), causing a JVM sealing
violation at startup.

The FIPS jars remain in :managed-dependencies for version pinning and
in :classpath-jars so ezbake copies them to staging. With the ezbake
fallback for resolving classpath-jar artifacts from managed-dependencies,
they no longer need to be in :dependencies.

Signed-off-by: nmburgan <13688219+nmburgan@users.noreply.github.com>
@github-actions
Copy link
Copy Markdown

The rpm/deb packages and the JAR file for openvox-server are available in a zip archive:
https://github.com/OpenVoxProject/openvox-server/actions/runs/24916190461/artifacts/6635422661

@bastelfreak bastelfreak enabled auto-merge April 25, 2026 06:41
@bastelfreak bastelfreak merged commit 1dcfee4 into main Apr 25, 2026
66 of 68 checks passed
@bastelfreak bastelfreak deleted the fips_fix branch April 25, 2026 06:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants