Skip to content

Backport FIPS 140-3#140695

Merged
ebarlas merged 4 commits intoelastic:8.19from
ebarlas:backport-fips-140-3
Jan 20, 2026
Merged

Backport FIPS 140-3#140695
ebarlas merged 4 commits intoelastic:8.19from
ebarlas:backport-fips-140-3

Conversation

@ebarlas
Copy link
Contributor

@ebarlas ebarlas commented Jan 14, 2026

Introduce bc sub-project library to encapsulate BC dependencies
and shading. Update plugin-cli to use this new library.
Comprehensive changes for the addition of FIPS 140-3 compliance
with Bouncy Castle 2.0.x:

- Testing with BC FIPS 2.0.x activated with Gradle build property
- FIPS Docker image activated with Gradle build property
- ES launch verification of BC FIPS provider
- Buildkite jobs activated with test-fips-140-3 label
- Add periodic FIPS 140-3 buildkite pipelines
- Use test-fips allow-label for CI
@ebarlas ebarlas added test-fips Trigger CI checks for FIPS :Security/Security Security issues without another label backport Team:Security Meta label for security team labels Jan 14, 2026
@ebarlas ebarlas force-pushed the backport-fips-140-3 branch from 689357a to 7dd4395 Compare January 14, 2026 22:52
@ebarlas ebarlas force-pushed the backport-fips-140-3 branch from 7dd4395 to c3c4d08 Compare January 14, 2026 22:56
@ebarlas ebarlas marked this pull request as ready for review January 15, 2026 01:00
@tvernum tvernum self-requested a review January 19, 2026 06:06
@ebarlas ebarlas merged commit e879dfa into elastic:8.19 Jan 20, 2026
45 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

backport :Security/Security Security issues without another label Team:Security Meta label for security team test-fips Trigger CI checks for FIPS v8.19.11

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants