Skip to content

Fix plugin install workflow by adding -Pcrypto.standard=FIPS-140-3 - #5962

Merged
cwperks merged 1 commit into
opensearch-project:mainfrom
cwperks:fix-plugin-install
Feb 19, 2026
Merged

Fix plugin install workflow by adding -Pcrypto.standard=FIPS-140-3#5962
cwperks merged 1 commit into
opensearch-project:mainfrom
cwperks:fix-plugin-install

Conversation

@cwperks

@cwperks cwperks commented Feb 19, 2026

Copy link
Copy Markdown
Member

Description

Fix plugin install workflow by adding -Pcrypto.standard=FIPS-140-3.

Fixes jar hell now that min distro is building with this by default.

-> Failed installing file:/home/runner/work/security/security/opensearch-security.zip
-> Rolling back file:/home/runner/work/security/security/opensearch-security.zip
-> Rolled back file:/home/runner/work/security/security/opensearch-security.zip
Error: Exception in thread "main" java.lang.IllegalStateException: failed to load plugin opensearch-security due to jar hell
	at org.opensearch.plugins.PluginsService.checkBundleJarHell(PluginsService.java:779)
	at org.opensearch.plugins.PluginsService.checkJarHellForPlugin(PluginsService.java:404)
	at org.opensearch.tools.cli.plugin.InstallPluginCommand.jarHellCheck(InstallPluginCommand.java:834)
	at org.opensearch.tools.cli.plugin.InstallPluginCommand.loadPluginInfo(InstallPluginCommand.java:811)
	at org.opensearch.tools.cli.plugin.InstallPluginCommand.installPlugin(InstallPluginCommand.java:846)
	at org.opensearch.tools.cli.plugin.InstallPluginCommand.execute(InstallPluginCommand.java:277)
	at org.opensearch.tools.cli.plugin.InstallPluginCommand.execute(InstallPluginCommand.java:251)
	at org.opensearch.common.cli.EnvironmentAwareCommand.execute(EnvironmentAwareCommand.java:110)
	at org.opensearch.cli.Command.mainWithoutErrorHandling(Command.java:138)
	at org.opensearch.cli.MultiCommand.execute(MultiCommand.java:104)
	at org.opensearch.cli.Command.mainWithoutErrorHandling(Command.java:138)
	at org.opensearch.cli.Command.main(Command.java:101)
	at org.opensearch.tools.cli.plugin.PluginCli.main(PluginCli.java:66)
Caused by: java.lang.IllegalStateException: jar hell!
class: org.bouncycastle.cert.AttributeCertificateHolder
jar1: /home/runner/work/security/security/opensearch-3.6.0-SNAPSHOT9200/plugins/.installing-4014912968827480493/bcpkix-fips-2.1.9.jar
jar2: /home/runner/work/security/security/opensearch-3.6.0-SNAPSHOT9200/lib/bcpkix-fips-2.1.9.jar
	at org.opensearch.common.bootstrap.JarHell.checkClass(JarHell.java:316)
	at org.opensearch.common.bootstrap.JarHell.checkJarHell(JarHell.java:215)
	at org.opensearch.plugins.PluginsService.checkBundleJarHell(PluginsService.java:777)
	... 12 more
  • Category (Enhancement, New feature, Bug fix, Test fix, Refactoring, Maintenance, Documentation)

Maintenance

Check List

  • New functionality includes testing
  • New functionality has been documented
  • New Roles/Permissions have a corresponding security dashboards plugin PR
  • API changes companion pull request created
  • Commits are signed per the DCO using --signoff

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and signing off your commits, please check here.

Signed-off-by: Craig Perkins <cwperx@amazon.com>
@cwperks
cwperks merged commit a936183 into opensearch-project:main Feb 19, 2026
63 of 71 checks passed
@codecov

codecov Bot commented Feb 19, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 73.80%. Comparing base (708da58) to head (a85decd).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files

Impacted file tree graph

@@            Coverage Diff             @@
##             main    #5962      +/-   ##
==========================================
- Coverage   73.80%   73.80%   -0.01%     
==========================================
  Files         439      439              
  Lines       27086    27086              
  Branches     4018     4018              
==========================================
- Hits        19992    19990       -2     
+ Misses       5189     5188       -1     
- Partials     1905     1908       +3     

see 8 files with indirect coverage changes

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants