Skip to content

Commit 7a2d700

Browse files
committed
Enable FIPS140LicenseBootstrapCheck (#32903)
This commit ensures that xpack.security.fips_mode.enabled: true cannot be set in a node that doesn't have the appropriate license.
1 parent 9c0540a commit 7a2d700

File tree

1 file changed

+2
-1
lines changed
  • x-pack/plugin/security/src/main/java/org/elasticsearch/xpack/security

1 file changed

+2
-1
lines changed

x-pack/plugin/security/src/main/java/org/elasticsearch/xpack/security/Security.java

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -310,7 +310,8 @@ public Security(Settings settings, final Path configPath) {
310310
new TLSLicenseBootstrapCheck(),
311311
new FIPS140SecureSettingsBootstrapCheck(settings, env),
312312
new FIPS140JKSKeystoreBootstrapCheck(settings),
313-
new FIPS140PasswordHashingAlgorithmBootstrapCheck(settings)));
313+
new FIPS140PasswordHashingAlgorithmBootstrapCheck(settings),
314+
new FIPS140LicenseBootstrapCheck(XPackSettings.FIPS_MODE_ENABLED.get(settings))));
314315
checks.addAll(InternalRealms.getBootstrapChecks(settings, env));
315316
this.bootstrapChecks = Collections.unmodifiableList(checks);
316317
Automatons.updateMaxDeterminizedStates(settings);

0 commit comments

Comments
 (0)