JanssenProject / JanssenProject/jans

feat: usage of Bouncy Castle FIPS should be added

Open
#2,278 0 comments 0 reactions 3 assignees Assigned to @yuriyz View on GitHub
kind-feature
Dominant language
Java
Stars
647
Forks
173
Avg merge
1d 18h
Merged PRs (30d)
110

Description

-------------------

### Description

- Development target issue
- During build of Jansen project(s) build must be obtained **-fips** modules, which must use **xxx-fips** suite of **Bouncy Castle** modules (**bc-fips**, **bcpkix-fips**, **bcmail-fips**) instead **bcxxx** (**bcprov**, **bcpkix**, **bcutil**, **bcmail**);
- **-fips** modules must use **.bcfks** keystore files instead **.jks** and **.pkcs12**.

- Implementation Details
- Dynamic loading of CryptoProvider (**Bouncy Castle**) class(es) should be added;
- **BCFIPS** CryptoProvider should be used instead **BC** CryptoProvider in code;
- **BCFKS** keystores should be used instead **JKS** and **PKCS12** keystores in code;
- All conflicts of loading of **Bouncy Castle** classes must be resolved;
- Build, using *xxx-fips** dependencies should be added (**pom.xml(s)** should be updated).
-------------------

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.