KostasTsiounis

> How come MD5 doesn't have a specific flag to disable it? It seems we have separate flags for everything else. https://eclipse.dev/openj9/docs/djdknativecrypto/ All digests had the same flag. That includes...

The original exception was `keytool error: java.security.KeyStoreException: sun.security.pkcs11.wrapper.PKCS11Exception: CKR_GENERAL_ERROR`. Within the catch block that starts [here](https://github.com/ibmruntimes/openj9-openjdk-jdk17/blob/61f7d221c0a0c843433fb930c431195c12669156/src/java.base/share/classes/sun/security/tools/keytool/Main.java#L425), the original exception is printed and a `System.exit(1)` is attempted, which apparently is not...

This appears to be the same as https://github.com/eclipse-openj9/openj9/issues/17672, which was attributed to a change in `NSS` behaviour that the `OpenJDK` hasn't picked up yet.

Apparently, the issue is not the same as https://github.com/eclipse-openj9/openj9/issues/17672. `SunPKCS11` is using `CKR_GENERAL_ERROR` to mask a variety of exception that may arise in that section. After adding additional debug information,...

After further investigation, it looks like the test is trying to create a `PKCS12` keystore, which is the default in `non-FIPS` scenarios, generate `RSA` keys and then retrieve them and...

We should also change `OpenSSL support is enabled by default for the Digest, CBC, GCM,...` to `OpenSSL support is enabled by default for the MD5, SHA-224, SHA-256, SHA-384, SHA-512, CBC,...

There is no native support for AIX at the moment. The flag is simply ignored there and the Java implementation is always used.

Sorry, I have misspoken here. What I meant is that here is no native support for AIX at the moment for the following algorithms: - EC key pair generation (i.e.,...

Does it just present itself on `RHEL` and `Java8`, or has it been seen elsewhere?

I have created a prototype fix that fixes that part of the test, but it fails at another point. The `TestEC` test runs the following subtests: ``` new TestECDH().main(p); new...