Skip to content

Commit 1831ba0

Browse files
authored
[Fips] Explicitly set trustStoreType to BCFKS in FIPS docker image (#129385) (#129417)
We see an certificate issue when using fips docker image creating searchable snapshots in aws and gcs. This is likely related to a configuration issue not explicitly setting the trust store type for our bcfks cacerts
1 parent e69a669 commit 1831ba0

File tree

1 file changed

+2
-0
lines changed
  • distribution/docker/src/docker/dockerfiles/cloud_ess_fips

1 file changed

+2
-0
lines changed

distribution/docker/src/docker/dockerfiles/cloud_ess_fips/Dockerfile

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -172,8 +172,10 @@ RUN cat <<EOF > /usr/share/elasticsearch/config/jvm.options.d/fips.options
172172
-Dorg.bouncycastle.fips.approved_only=true
173173
-Djava.security.properties=config/fips_java.security
174174
-Djava.security.policy=config/fips_java.policy
175+
-Djavax.net.ssl.trustStoreType=BCFKS
175176
-Djavax.net.ssl.trustStore=config/cacerts.bcfks
176177
-Djavax.net.ssl.trustStorePassword=passwordcacert
178+
177179
EOF
178180

179181
EXPOSE 9200 9300

0 commit comments

Comments
 (0)