OpenSearch/x-pack/docs/en
Ioannis Kakavas e0331e2a0f
Remove limitation for SAML encryption in FIPS mode (#48948) (#49019)
Our documentation regarding FIPS 140 claimed that when using SAML
in a JVM that is configured in FIPS approved only mode, one could
not use encrypted assertions. This stemmed from a wrong
understanding regarding the compliance of RSA-OAEP which is used
as the key wrapping algorithm for encrypting the key with which the
SAML Assertion is encrypted.

However, as stated for instance in
https://downloads.bouncycastle.org/fips-java/BC-FJA-SecurityPolicy-1.0.0.pdf
RSA-OAEP is approved for key transport, so this limitation is not
effective.

This change removes the limitation from our FIPS 140 related
documentation.
2019-11-13 12:10:01 +02:00
..
rest-api Fix indentation of "except" in role mapping doc 2019-11-01 10:46:15 -04:00
security Remove limitation for SAML encryption in FIPS mode (#48948) (#49019) 2019-11-13 12:10:01 +02:00
watcher [DOCS] Fixes missing link title (#47481) 2019-10-03 08:06:31 -07:00