Skip to content

Commit 2126eb4

Browse files
Magisusaustb
authored andcommitted
(PE-32070) Update Java security files for new BCFIPS
There is an issue with bc-fips 1.0.2.1 involving circular provider loading, that can be fixed by using the full class name for the BCJSSE FIPS provider, rather than relying on an alias. This commit updates our java-security files to use the full name. Note this only caused issues on Java 11, but it is valid for both versions, so we are updating it in both files for consistency.
1 parent c290a26 commit 2126eb4

File tree

2 files changed

+2
-2
lines changed

2 files changed

+2
-2
lines changed

dev-resources/jdk11-fips-security

+1-1
Original file line numberDiff line numberDiff line change
@@ -61,7 +61,7 @@
6161
# List of providers and their preference orders (see above):
6262
#
6363
security.provider.1=org.bouncycastle.jcajce.provider.BouncyCastleFipsProvider
64-
security.provider.2=org.bouncycastle.jsse.provider.BouncyCastleJsseProvider fips:BCFIPS
64+
security.provider.2=org.bouncycastle.jsse.provider.BouncyCastleJsseProvider fips:org.bouncycastle.jcajce.provider.BouncyCastleFipsProvider
6565
security.provider.3=SUN
6666
security.provider.4=SunRsaSign
6767
#security.provider.5=SunEC

dev-resources/jdk8-fips-security

+1-1
Original file line numberDiff line numberDiff line change
@@ -66,7 +66,7 @@
6666
# List of providers and their preference orders (see above):
6767
#
6868
security.provider.1=org.bouncycastle.jcajce.provider.BouncyCastleFipsProvider
69-
security.provider.2=org.bouncycastle.jsse.provider.BouncyCastleJsseProvider fips:BCFIPS
69+
security.provider.2=org.bouncycastle.jsse.provider.BouncyCastleJsseProvider fips:org.bouncycastle.jcajce.provider.BouncyCastleFipsProvider
7070
security.provider.3=sun.security.provider.Sun
7171
security.provider.4=sun.security.rsa.SunRsaSign
7272
#security.provider.5=sun.security.ec.SunEC

0 commit comments

Comments
 (0)