Skip to content

Commit 75014a2

Browse files
authored
Enable FIPS140LicenseBootstrapCheck (#32903)
This commit ensures that xpack.security.fips_mode.enabled: true cannot be set in a node that doesn't have the appropriate license.
1 parent ca54aac commit 75014a2

File tree

1 file changed

+2
-1
lines changed
  • x-pack/plugin/security/src/main/java/org/elasticsearch/xpack/security

1 file changed

+2
-1
lines changed

x-pack/plugin/security/src/main/java/org/elasticsearch/xpack/security/Security.java

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -301,7 +301,8 @@ public Security(Settings settings, final Path configPath) {
301301
new TLSLicenseBootstrapCheck(),
302302
new FIPS140SecureSettingsBootstrapCheck(settings, env),
303303
new FIPS140JKSKeystoreBootstrapCheck(settings),
304-
new FIPS140PasswordHashingAlgorithmBootstrapCheck(settings)));
304+
new FIPS140PasswordHashingAlgorithmBootstrapCheck(settings),
305+
new FIPS140LicenseBootstrapCheck(XPackSettings.FIPS_MODE_ENABLED.get(settings))));
305306
checks.addAll(InternalRealms.getBootstrapChecks(settings, env));
306307
this.bootstrapChecks = Collections.unmodifiableList(checks);
307308
Automatons.updateMaxDeterminizedStates(settings);

0 commit comments

Comments
 (0)