There issue that use Java 8 keytool to create Java keystore using BC FIPS provider

Jeff Huang <jeff.huang-/Il8SMrEplgS/6/[email protected]> Thu, 19 Sep 2019 01:55:43 -0500 (CDT)
Newsgroups gmane.comp.encryption.bouncy-castle.devel
Message-ID <[email protected]>
Hello,

I used Java 8 keystool to create Java Keystore using BC FIPS provider. But
keytool -list command still show provider is SunJSSE. Is that ok?

keytool  -keystore  kafka.server.keystore.pk12   -alias   localhost  
-validity 720  -genkeypair  -keyalg RSA -keysize 2048 -storepass testfips  
-keypass  testfips -storetype PKCS12  -providerpath 
/home/ec2-user/tmp/ssl-keys/bc-fips-1.0.2.jar -providerclass
org.bouncycastle.jcajce.provider.BouncyCastleFipsProvider  -dname 
CN=localhost   -ext   SAN=DNS:localhost

[ec2-user@localhost ssl-keys-bc]$ keytool -list  -providerpath 
/home/ec2-user/tmp/ssl-keys/bc-fips-1.0.2.jar -providerclass
org.bouncycastle.jcajce.provider.BouncyCastleFipsProvider -keystore
kafka.server.keystore.pk12 -storetype pkcs12 -storepass testfips
Keystore type: PKCS12
Keystore provider: *SunJSSE*

Your keystore contains 1 entry

localhost, Sep 19, 2019, PrivateKeyEntry,
Certificate fingerprint (SHA1):
3C:6D:7C:3A:D4:A1:9F:9A:CF:5F:AC:C7:4D:50:5A:F4:14:DD:50:A2

thanks



--
Sent from: http://bouncy-castle.1462172.n4.nabble.com/Bouncy-Castle-Dev-f1462173.html