RH2117972 - Extend the support for NSS DBs (PKCS11) in FIPS mode

[martinuy]

Search this PR in Red Hat Jira

Diff of this PR only	Dependency chain
9087e80...f130489	rh-openjdk:fips ← THIS PR

11u backport of the RH2117972 enhancement. See the 17u PR for further reference: rh-openjdk/jdk#17

Differences with the 17u patch:

• src/jdk.crypto.cryptoki/share/classes/sun/security/pkcs11/SunPKCS11.java

  • Hook context to add the import of import "sun.security.util.SecurityProperties".
    • Added the import manually.

• src/jdk.crypto.cryptoki/share/classes/sun/security/pkcs11/Token.java

  • SharedSecrets is in the jdk.internal.misc package in 11u.

• test/jdk/sun/security/pkcs11/fips/NssdbPin.java

  • Proc location is in test/jdk/java/security/testlibrary
  • Export of the package java.base/jdk.internal.misc to the Unnamed module is required

[franferrax]

Hi @martinuy, it looks good to me.

NOTE: this PR already includes changes of rh-openjdk/jdk#17 review.

[franferrax]

Removing approval, as we need to:

• Backport Add nss.fips.cfg support to OpenJDK tree jdk#22 to this repository, so we can make the nss.fips.cfg changes
• Apply f9afab1...69cabe4 from RH2117972 - Extend the support for NSS DBs (PKCS11) in FIPS mode jdk#17