Some Eclipse Foundation services are deprecated, or will be soon. Please ensure you've read this important communication.
Bug 343902 - [Help] Add FIPS support to the Help System
Summary: [Help] Add FIPS support to the Help System
Status: CLOSED WONTFIX
Alias: None
Product: Platform
Classification: Eclipse Project
Component: User Assistance (show other bugs)
Version: 3.7   Edit
Hardware: PC Windows 7
: P3 normal (vote)
Target Milestone: ---   Edit
Assignee: platform-ua-inbox CLA
QA Contact:
URL:
Whiteboard: stalebug
Keywords:
Depends on:
Blocks:
 
Reported: 2011-04-26 15:55 EDT by Chris Austin CLA
Modified: 2019-11-14 02:12 EST (History)
0 users

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Chris Austin CLA 2011-04-26 15:55:02 EDT 
Currently, https support in the Help System uses SSL connections:
    SSLContext sc = SSLContext.getInstance( "SSL" ); //$NON-NLS-1$

In order to add support for FIPS, I believe we would need to allow for TLS connections:
    SSLContext.getInstance( "TLS" );
Comment 1 Chris Austin CLA 2011-04-26 15:57:15 EDT 
Additional info according to the IBMJSEE2 Reference Guide
(http://www.ibm.com/developerworks/java/jdk/security/50/secguides/jsse2Docs/JSSE2RefGuide.html#runfips)

"FIPS requires that the SSL protocol to be TLS. The SSLv3 protocol is not allowed when in FIPS mode. If the client or the server have requested to handshake using the SSLv3 protocol while in FIPS mode, the the handshake will fail."
Comment 2 Lars Vogel CLA 2019-11-14 02:12:21 EST 
This bug hasn't had any activity in quite some time. Maybe the problem got resolved, was a duplicate of something else, or became less pressing for some reason - or maybe it's still relevant but just hasn't been looked at yet.

If you have further information on the current state of the bug, please add it. The information can be, for example, that the problem still occurs, that you still want the feature, that more information is needed, or that the bug is (for whatever reason) no longer relevant.

If the bug is still relevant, please remove the "stalebug" whiteboard tag.