4.17.2. FIPS 模式更改
如果您以 FIPS 模式运行,请注意,默认行为在 JBoss EAP 7.0 和 JBoss EAP 7.1 之间发生了变化。
使用传统安全域时,JBoss EAP 7.1 和更高版本提供自动生成自签名证书以进行开发。默认情况下,此功能在 JBoss EAP 7.0 中不可用。这意味着,如果您在 FIPS 模式下运行,您必须将服务器配置为禁用自动自签名证书创建。否则,在启动服务器时可能会看到以下错误:
ERROR [org.xnio.listener] (default I/O-6) XNIO001007: A channel event listener threw an exception: java.lang.RuntimeException: WFLYDM0114: Failed to lazily initialize SSL context ... Caused by: java.lang.RuntimeException: WFLYDM0112: Failed to generate self signed certificate ... Caused by: java.security.KeyStoreException: Cannot get key bytes, not PKCS#8 encoded
ERROR [org.xnio.listener] (default I/O-6) XNIO001007: A channel event listener threw an exception: java.lang.RuntimeException: WFLYDM0114: Failed to lazily initialize SSL context
...
Caused by: java.lang.RuntimeException: WFLYDM0112: Failed to generate self signed certificate
...
Caused by: java.security.KeyStoreException: Cannot get key bytes, not PKCS#8 encoded
有关自动创建自签名证书的信息,请参阅如何为 JBoss EAP 配置服务器 https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.3/html-single/how_to_configure_server_security/#automatic_self_signed_cert_creation 安全性中的自动签署应用证书创建。