92f9e6d RH2007331: SecretKey generate/import operations don't add the CKA_SIGN attribute in FIPS mode

Authored and Committed by fferrari 2 years ago
    RH2007331: SecretKey generate/import operations don't add the CKA_SIGN attribute in FIPS mode
    
    Use SunPKCS11 Attributes Configuration to set CKA_SIGN=true on SecretKey generate/import operations in FIPS mode, see:
    https://docs.oracle.com/en/java/javase/17/security/pkcs11-reference-guide1.html#GUID-C4ABFACB-B2C9-4E71-A313-79F881488BB9__PKCS11-ATTRIBUTES-CONFIGURATION
    
        
file modified
+4 -1
file modified
+2 -0