BC FIPS provider got handshake errors for some FIPS mode cipher suites

Hello,

The following cipher suites are FIPS mode based on "Appendix B =E2=80=93 Su=
pported
Cipher Suites" in BC-FJA-(D)TLSUserGuide-1.0.9.pdf.

I got handshake errors for all cipher suites with DHE key exchange algorith=
m
and all cipher suites with ECDHE key exchange algorithm and ECDSA
authentication algorithm.=20

*The following cipher suite are not working*
 TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA,        =20
 TLS_DHE_DSS_WITH_AES_128_CBC_SHA,
 TLS_DHE_DSS_WITH_AES_128_CBC_SHA256,
 TLS_DHE_DSS_WITH_AES_256_CBC_SHA,
 TLS_DHE_DSS_WITH_AES_256_CBC_SHA256,

TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA,
TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA,      =20
TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256,
TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA,
TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384,

*The following cipher suites are working. *
TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA,
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256,
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,
TLS_RSA_WITH_3DES_EDE_CBC_SHA,             =20
TLS_RSA_WITH_AES_128_CBC_SHA,
TLS_RSA_WITH_AES_128_CBC_SHA256,
TLS_RSA_WITH_AES_128_CCM,                  =20
TLS_RSA_WITH_AES_256_CBC_SHA,
TLS_RSA_WITH_AES_256_CBC_SHA256,
TLS_RSA_WITH_AES_256_CCM   =20

Is that right behavior? Or I missed something. I did both key manager
algorithm and trust manager algorithm to PKIS, key store type is pkcs12.

Thanks!

Jeff.=20



--
Sent from: http://bouncy-castle.1462172.n4.nabble.com/Bouncy-Castle-Dev-f14=
62173.html