Browse Source

Add missing entitlements for FIPS (#122941)

Add missing entitlements for FIPS
Moritz Mack 8 months ago
parent
commit
3b1825571d

+ 4 - 2
libs/entitlement/src/main/java/org/elasticsearch/entitlement/initialization/EntitlementInitialization.java

@@ -215,8 +215,10 @@ public class EntitlementInitialization {
 
         Path trustStorePath = trustStorePath();
         if (trustStorePath != null) {
-            serverScopes.add(
-                new Scope("org.bouncycastle.fips.tls", List.of(new FilesEntitlement(List.of(FileData.ofPath(trustStorePath, READ)))))
+            Collections.addAll(
+                serverScopes,
+                new Scope("org.bouncycastle.fips.tls", List.of(new FilesEntitlement(List.of(FileData.ofPath(trustStorePath, READ))))),
+                new Scope("org.bouncycastle.fips.core", List.of(new ManageThreadsEntitlement()))
             );
         }