Just a minor suggestion.  Endi added in CryptalUtil.java lately to fix similar FIPS related issue:

isInternalToken().

You might want to take advantage of that instead as it does ignore case.

It's up to you.

ACK.

Christina

TPS token enrollment fails to setupSecureChannel when TPS and TKS security db is on fips mode.
    
    Ticket #2513.
    
    Simple fix allows the TPS and TKS the ability to obtain the proper internal token, even in FiPS mode.

_______________________________________________
Pki-devel mailing list
Pki-devel@redhat.com
https://www.redhat.com/mailman/listinfo/pki-devel