There issue that use Java 8 keytool to create Java keystore using BC FIPS provider
Jeff Huang <jeff.huang-/Il8SMrEplgS/6/[email protected]> Thu, 19 Sep 2019 01:55:43 -0500 (CDT)
| Newsgroups | gmane.comp.encryption.bouncy-castle.devel |
|---|---|
| Message-ID | <[email protected]> |
Hello, I used Java 8 keystool to create Java Keystore using BC FIPS provider. But keytool -list command still show provider is SunJSSE. Is that ok? keytool -keystore kafka.server.keystore.pk12 -alias localhost -validity 720 -genkeypair -keyalg RSA -keysize 2048 -storepass testfips -keypass testfips -storetype PKCS12 -providerpath /home/ec2-user/tmp/ssl-keys/bc-fips-1.0.2.jar -providerclass org.bouncycastle.jcajce.provider.BouncyCastleFipsProvider -dname CN=localhost -ext SAN=DNS:localhost [ec2-user@localhost ssl-keys-bc]$ keytool -list -providerpath /home/ec2-user/tmp/ssl-keys/bc-fips-1.0.2.jar -providerclass org.bouncycastle.jcajce.provider.BouncyCastleFipsProvider -keystore kafka.server.keystore.pk12 -storetype pkcs12 -storepass testfips Keystore type: PKCS12 Keystore provider: *SunJSSE* Your keystore contains 1 entry localhost, Sep 19, 2019, PrivateKeyEntry, Certificate fingerprint (SHA1): 3C:6D:7C:3A:D4:A1:9F:9A:CF:5F:AC:C7:4D:50:5A:F4:14:DD:50:A2 thanks -- Sent from: http://bouncy-castle.1462172.n4.nabble.com/Bouncy-Castle-Dev-f1462173.html