In FIPS/TestClusters, set hasher to pbkdf2_stretch (elastic#66841)

tvernum · web-flow · commit 5bd2f13df823 · 2020-12-29T18:29:28.000+11:00
When running tests in FIPS mode, automatically set the password hasher to pbkdf2_stretch rather than relying on the default (which is bcrypt). This is only relevant to the 7.x series, as this setting has a FIPS specific default when run in FIPS mode on 8.0+ Resolves: elastic#66819
diff --git a/gradle/fips.gradle b/gradle/fips.gradle
@@ -72,6 +72,7 @@ if (BuildParams.inFipsJvm) {
           systemProperty 'org.bouncycastle.fips.approved_only', 'true'
           setting 'xpack.security.fips_mode.enabled', 'true'
           setting 'xpack.license.self_generated.type', 'trial'
+          setting 'xpack.security.authc.password_hashing.algorithm', 'pbkdf2_stretch'
           keystorePassword 'keystore-password'
         }
       }

Original file line number	Diff line number	Diff line change
`@@ -72,6 +72,7 @@ if (BuildParams.inFipsJvm) {`
`72`	`72`	`systemProperty 'org.bouncycastle.fips.approved_only', 'true'`
`73`	`73`	`setting 'xpack.security.fips_mode.enabled', 'true'`
`74`	`74`	`setting 'xpack.license.self_generated.type', 'trial'`
	`75`	`+ setting 'xpack.security.authc.password_hashing.algorithm', 'pbkdf2_stretch'`
`75`	`76`	`keystorePassword 'keystore-password'`
`76`	`77`	`}`
`77`	`78`	`}`