Bouncy Castle FIPS Issue

[Scott Coldwell]

I had read that page before as well.  I understand that we shouldn’t be replacing dependencies and normally we wouldn’t have, but we wanted to be certain that only the FIPS compliant encryption was being used and I was also under the assumption that it would be a drop-in replacement for the standard bcprov, but that’s obviously not the case.  I will reach out to the bouncy castle folks on this issue since from my reading, bcprov-jdk15on and bc-fips can’t coexist on the classpath.  Thanks everyone.

> On May 18, 2021, at 8:19 AM, Cantor, Scott <cantor.2 at osu.edu> wrote:
> 
> On 5/17/21, 10:07 PM, "users on behalf of Brent Putman" <users-bounces at shibboleth.net on behalf of putmanb at georgetown.edu> wrote:
> 
>> Don't know that we've ever been asked about FIPS compliance for the Shib IdP.
> 
> Periodically, not lately.
> 
> https://wiki.shibboleth.net/confluence/display/DEV/FIPS
> 
> -- Scott
> 
> 
> -- 
> For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net