Skip to content

Commit 0c3ce8d

Browse files
committed
Fix ADRealmTests in FIPS 140 JVMs
The changes introduced in elastic#47179 made it so that we could try to build an SSLContext with verification mode set to None, which is not allowed in FIPS 140 JVMs. This commit address that
1 parent b847030 commit 0c3ce8d

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

x-pack/plugin/security/src/test/java/org/elasticsearch/xpack/security/authc/ldap/ActiveDirectoryRealmTests.java

+2-2
Original file line numberDiff line numberDiff line change
@@ -533,12 +533,12 @@ private Settings settings(RealmConfig.RealmIdentifier realmIdentifier, Settings
533533
.put(getFullSettingKey(realmIdentifier.getName(), ActiveDirectorySessionFactorySettings.AD_DOMAIN_NAME_SETTING),
534534
"ad.test.elasticsearch.com")
535535
.put(getFullSettingKey(realmIdentifier, DnRoleMapperSettings.USE_UNMAPPED_GROUPS_AS_ROLES_SETTING), true);
536-
if (randomBoolean()) {
536+
if (inFipsJvm()) {
537537
builder.put(getFullSettingKey(realmIdentifier, SSLConfigurationSettings.VERIFICATION_MODE_SETTING_REALM),
538538
VerificationMode.CERTIFICATE);
539539
} else {
540540
builder.put(getFullSettingKey(realmIdentifier, SSLConfigurationSettings.VERIFICATION_MODE_SETTING_REALM),
541-
VerificationMode.NONE);
541+
randomBoolean() ? VerificationMode.CERTIFICATE : VerificationMode.NONE);
542542
}
543543
return builder.put(extraSettings).build();
544544
}

0 commit comments

Comments
 (0)