Skip to content

Commit 8167b3f

Browse files
committed
Enable FIPS140LicenseBootstrapCheck (#32903)
This commit ensures that xpack.security.fips_mode.enabled: true cannot be set in a node that doesn't have the appropriate license.
1 parent cb16141 commit 8167b3f

File tree

1 file changed

+2
-1
lines changed
  • x-pack/plugin/security/src/main/java/org/elasticsearch/xpack/security

1 file changed

+2
-1
lines changed

x-pack/plugin/security/src/main/java/org/elasticsearch/xpack/security/Security.java

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -311,7 +311,8 @@ public Security(Settings settings, final Path configPath) {
311311
new PasswordHashingAlgorithmBootstrapCheck(),
312312
new FIPS140SecureSettingsBootstrapCheck(settings, env),
313313
new FIPS140JKSKeystoreBootstrapCheck(settings),
314-
new FIPS140PasswordHashingAlgorithmBootstrapCheck(settings)));
314+
new FIPS140PasswordHashingAlgorithmBootstrapCheck(settings),
315+
new FIPS140LicenseBootstrapCheck(XPackSettings.FIPS_MODE_ENABLED.get(settings))));
315316
checks.addAll(InternalRealms.getBootstrapChecks(settings, env));
316317
this.bootstrapChecks = Collections.unmodifiableList(checks);
317318
Automatons.updateMaxDeterminizedStates(settings);

0 commit comments

Comments
 (0)