Andrew Watson created DIRSERVER-2363:
----------------------------------------
Summary: Use FIPS-compliant Bouncy Castle
Key: DIRSERVER-2363
URL: https://issues.apache.org/jira/browse/DIRSERVER-2363
Project: Directory ApacheDS
Issue Type: Improvement
Reporter: Andrew Watson
*org.apache.directory.server* is currently using a non-FIPS compliant Bouncy
Castle
[https://en.wikipedia.org/wiki/FIPS_140]
See here, for example
[https://github.com/apache/directory-server/blob/master/core/src/main/java/org/apache/directory/server/core/security/TlsKeyGenerator.java#L54]
It would be helpful if FIPS compliance could be introduced here (for projects
looking to achieve FIPS compliance and which uptake
{*}org.apache.directory.server{*}), in part by moving to the FIPS-compliant
{*}org.bouncycastle:bc-fips{*}.
--
This message was sent by Atlassian Jira
(v8.20.1#820001)
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org
For additional commands, e-mail: dev-h...@directory.apache.org
