prefer IllegalArgumentException when escapeHatchEnabled in FIPS mode

Signed-off-by: Olivier Lamy <[email protected]>
jenkinsci · Oct 10, 2024 · 1f77826 · 1f77826
1 parent 3eb7bf4
commit 1f77826
Showing 1 changed file with 7 additions and 1 deletion.
diff --git a/src/main/java/org/jenkinsci/plugins/oic/OicSecurityRealm.java b/src/main/java/org/jenkinsci/plugins/oic/OicSecurityRealm.java
@@ -338,9 +338,15 @@ protected Object readResolve() throws ObjectStreamException {
         this.setTokenFieldToCheckKey(this.tokenFieldToCheckKey);
         // ensure escapeHatchSecret is encrypted
         this.setEscapeHatchSecret(this.escapeHatchSecret);
+
+        // validate this option in FIPS env or not
         try {
-            // validate this option in FIPS env or not
             this.setEscapeHatchEnabled(this.escapeHatchEnabled);
+        } catch (FormException e) {
+            throw new IllegalArgumentException(e);
+        }
+
+        try {
             if (automanualconfigure != null) {
                 if ("auto".equals(automanualconfigure)) {
                     OicServerWellKnownConfiguration conf =