[6517][pulsar-client] FIPS BouncyCastle support for cryptography lib(WIP) - #6559
[6517][pulsar-client] FIPS BouncyCastle support for cryptography lib(WIP)#6559kemburi wants to merge 4 commits into
Conversation
|
@kemburi Thanks for the work. But we may need a way to support both BouncyCastleProvider and BouncyCastleFipsProvider. If doing this in current replace way, the other user that use BouncyCastleProvider will also meet problem. |
|
@jiazhai yes, I agree, but I wanted to check if my currunt use case on my test systems works or not |
|
@kemburi Get it. Marked it as WIP(Work in Progress). Mean while I will also take a look on how to make BouncyCastleProvider and BouncyCastleFipsProvider configurable. |
|
This FIPS provider is supported in #6588. It will be released in 2.5.1 & 2.6.0. |
(If this PR fixes a github issue, please add
Fixes #<xyz>.)Fixes #6517
(or if this PR is one task of a github issue, please add
Master Issue: #<xyz>to link to the master issue.)Master Issue: #
Motivation
We need to push data to pulsar from a bcfips complaint jboss. But since pulsar clinet has bc hardcoded as security provider we are not able to push data to pulsar in ssl mode.
Explain here the context, and why you're making that change. What is the problem you're trying to solve.
Modifications
Describe the modifications you've done.
Verifying this change
(Please pick either of the following options)
This change is a trivial rework / code cleanup without any test coverage.
(or)
This change is already covered by existing tests, such as (please describe tests).
(or)
This change added tests and can be verified as follows:
(example:)
Does this pull request potentially affect one of the following parts:
If
yeswas chosen, please highlight the changesDocumentation