Fixes #38010 - Include keyalg in keytool for OpenJDK 17

Signed-off-by: Eric D. Helms <[email protected]>
theforeman · Nov 12, 2024 · dc0f12e · dc0f12e
1 parent a0f5240
commit dc0f12e
Show file tree

Hide file tree

Showing 4 changed files with 9 additions and 8 deletions.
diff --git a/lib/puppet_x/certs/provider/keystore.rb b/lib/puppet_x/certs/provider/keystore.rb
@@ -53,7 +53,8 @@ def generate_keystore
               '-storepass:file', resource[:password_file],
               '-alias', temp_alias,
               '-dname', "CN=#{temp_alias}",
-              '-J-Dcom.redhat.fips=false'
+              '-J-Dcom.redhat.fips=false',
+              '-keyalg', 'RSA'
             )
           rescue Puppet::ExecutionFailure => e
             Puppet.err("Failed to generate new #{type} with temporary entry: #{e}")

diff --git a/spec/acceptance/candlepin_spec.rb b/spec/acceptance/candlepin_spec.rb
@@ -37,7 +37,7 @@
           }
         }
 
-        package { 'java-11-openjdk-headless':
+        package { 'java-17-openjdk-headless':
           ensure => installed,
         }
 
@@ -242,7 +242,7 @@ class { 'certs::candlepin':
         }
       }
 
-      package { 'java-11-openjdk-headless':
+      package { 'java-17-openjdk-headless':
         ensure => installed,
       }
 
@@ -283,7 +283,7 @@ class { 'certs::candlepin':
           path    => ['/bin', '/usr/bin'],
         }
       }
-      package { 'java-11-openjdk-headless':
+      package { 'java-17-openjdk-headless':
         ensure => installed,
       }
       include certs::candlepin

diff --git a/spec/acceptance/keystore_spec.rb b/spec/acceptance/keystore_spec.rb
@@ -7,7 +7,7 @@
         <<-PUPPET
         $keystore_password_file = '/etc/pki/keystore_password-file'
 
-        package { 'java-11-openjdk-headless':
+        package { 'java-17-openjdk-headless':
           ensure => installed,
         }
 

diff --git a/spec/acceptance/truststore_spec.rb b/spec/acceptance/truststore_spec.rb
@@ -10,7 +10,7 @@
         <<-PUPPET
         $truststore_password_file = '/etc/pki/truststore_password-file'
 
-        package { 'java-11-openjdk-headless':
+        package { 'java-17-openjdk-headless':
           ensure => installed,
         }
 
@@ -94,7 +94,7 @@
           <<-PUPPET
           $truststore_password_file = '/etc/pki/truststore_password-file'
 
-          package { 'java-11-openjdk-headless':
+          package { 'java-17-openjdk-headless':
             ensure => installed,
           }
 
@@ -158,7 +158,7 @@
           <<-PUPPET
           $truststore_password_file = '/etc/pki/truststore_password-file'
 
-          package { 'java-11-openjdk-headless':
+          package { 'java-17-openjdk-headless':
             ensure => installed,
           }