[
https://issues.apache.org/jira/browse/DIRSERVER-2363?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Emmanuel Lécharny updated DIRSERVER-2363:
-----------------------------------------
Component/s: security
> Use FIPS-compliant Bouncy Castle
> --------------------------------
>
> Key: DIRSERVER-2363
> URL: https://issues.apache.org/jira/browse/DIRSERVER-2363
> Project: Directory ApacheDS
> Issue Type: Improvement
> Components: security
> Reporter: Andrew Watson
> Priority: Major
>
> *org.apache.directory.server* is currently using a non-FIPS compliant Bouncy
> Castle
> [https://en.wikipedia.org/wiki/FIPS_140]
> See here, for example
> [https://github.com/apache/directory-server/blob/master/core/src/main/java/org/apache/directory/server/core/security/TlsKeyGenerator.java#L54]
> It would be helpful if FIPS compliance could be introduced here (for projects
> looking to achieve FIPS compliance and which uptake
> {*}org.apache.directory.server{*}), in part by moving to the FIPS-compliant
> {*}org.bouncycastle:bc-fips{*}.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org
For additional commands, e-mail: dev-h...@directory.apache.org
