Jira (FACT-2742) Exclude net/https when running on jruby FIPS

[Bogdan Irimie (Jira)]

Bogdan Irimie created an issue

Facter / FACT-2742 Exclude net/https when running on jruby FIPS Issue Type: Bug Assignee: Unassigned Created: 2020/08/12 1:50 AM Labels: platform_7 Priority: Normal Reporter: Bogdan Irimie TODO Add Comment

This message was sent by Atlassian Jira (v8.5.2#805002-sha1:a66f935)

[Bogdan Irimie (Jira)]

Bogdan Irimie updated an issue

Facter / FACT-2742 Exclude net/https when running on jruby FIPS

Change By: Bogdan Irimie Story Points: 2

Add Comment

[Bogdan Irimie (Jira)]

Bogdan Irimie assigned an issue to Bogdan Irimie

Facter / FACT-2742 Exclude net/https when running on jruby FIPS

Change By: Bogdan Irimie Assignee: Bogdan Irimie

Add Comment

[Bogdan Irimie (Jira)]

Bogdan Irimie updated an issue

Facter / FACT-2742 Exclude net/https when running on jruby FIPS Change By: Bogdan Irimie

TODO When running facter on jRuby, we are not fips compliant because we are using `net/http` in our ec2 fact. As the server only uses a small subset of facts (ec2 not included), we should exclude these facts when running on jRuby.

Add Comment

[Bogdan Irimie (Jira)]

Bogdan Irimie updated an issue

Facter / FACT-2742 Exclude net/https when running on jruby FIPS Change By: Bogdan Irimie

When running facter on jRuby, we are not fips compliant because we are using `net/http` in our ec2 fact.

As the server only uses a small subset of facts (ec2 not included), we should exclude these facts when running on jRuby. One of the suggestions from the server team is to do something similar to what has been done in puppet https://github.com/puppetlabs/puppet/blob/eadd5474c26e7d28d90de00b9d7a7545ac10e55d/lib/puppet/ssl/openssl_loader.rb#L8

Add Comment