8000 Disable X25519MLKEM768 for Maven in FIPS tests by stianst · Pull Request #54399 · keycloak/keycloak · GitHub
[go: up one dir, main page]

Skip to content

Disable X25519MLKEM768 for Maven in FIPS tests - #54399

Merged
stianst merged 1 commit into
keycloak:mainfrom
stianst:mvn-fips-fix
Oct 28, 2026
Merged

stianst merged 1 commit into
keycloak:mainfrom
stianst:mvn-fips-fix

Conversation

@stianst
@stianst stianst commented Oct 28, 2026
Copy link
Copy Markdown
Contributor

Closes #54398

Signed-off-by: stianst stianst@gmail.com

Closes keycloak#54398

Signed-off-by: stianst <stianst@gmail.com>
Copilot AI balanced review requested due to automatic review settings October 28, 2026 06:42
@stianst
stianst requested a review from a team as a code owner October 28, 2026 06:42
Copilot AI left a comment
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟢 Approval recommended

There are no active review issues blocking the FIPS test-script changes.

No open issues 🎉

What changed in this PR

Updates the FIPS test scripts to exclude X25519MLKEM768 from Maven’s TLS named groups, addressing the artifact-download failures reported in #54398.

Changes:

  • Adds an explicit TLS named-group list to MAVEN_OPTS for both unit and integration tests, preserving existing options.
  • Documents why the workaround is needed for JDK 25.0.5+ in FIPS mode.
File Description
.github/​scripts/​run-fips-ut.sh Configures Maven TLS groups for FIPS unit-test runs.
.github/​scripts/​run-fips-it.sh Applies the same configuration to FIPS integration-test runs.

Review effort: Balanced

@stianst
stianst marked this pull request as draft October 28, 2026 06:51
@stianst
stianst marked this pull request as ready for review October 28, 2026 07:31
@rmartinc rmartinc left a comment
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks @stianst! LGTM!

@stianst
stianst merged commit cfe4a41 into keycloak:main Oct 28, 2026
99 checks passed
@shawkins
shawkins commented Nov 2, 2026 •
Copy link
Copy Markdown
Contributor

@stianst I opened the backport PRs. #54468 at least needs this for the CI to run cleanly.

vmuzikar pushed a commit that referenced this pull request Nov 6, 2026
Closes #54398


(cherry picked from commit cfe4a41)

Signed-off-by: stianst <stianst@gmail.com>
Co-authored-by: Stian Thorgersen <stianst@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

FIPS tests failing: Could not transfer artifact / Could not generate keypair for algorithm: X25519MLKEM768

4 participants

0