RE: Can I set FIPS mode globally?

Arnold Geels <Arnold.Geels-/[email protected]> Tue, 26 Feb 2019 13:11:55 +0000

Newsgroups	gmane.comp.encryption.bouncy-castle.devel
Message-ID	<BYAPR18MB239260DFA5B782E92E057479EF7B0@BYAPR18MB2392.namprd18.prod.outlook.com>

Hi Ernie,

You can set System property "org.bouncycastle.fips.approved_only".  Look in org.bouncycastle.crypto.CryptoServicesRegistrar.java for details.

HTH,

Arno1d.


From: Ernie Kovak [mailto:[email protected]] 
Sent: Monday, February 25, 2019 22:14
To: [email protected]
Subject: [dev-crypto] Can I set FIPS mode globally?

Hello -

I've searched the archive, and I find no information on whether or not approved mode can be set on all threads by default. I'm running in tomcat without a security manager, but would still like to have all threads in approved mode.

Any suggestions?

Thanks!
Ernie