Open
Description
Hi,
I am trying to use all BC Fips jars to make our product FIPS compliant. For certificate path validation, I try to use class org.bouncycastle.pkix.jcajce.PKIXCertPathReviewer from bcpkix-fips-2.0.7.jar. Its init method is throwing IllegalStateException: unable to rebuild certpath.
When I checked the source code of PKIXCertPathReviewer.java, I found it has following code:
try
{
CertificateFactory cf = CertificateFactory.getInstance("X.509", "BC");
this.certPath = cf.generateCertPath(certs);
}
catch (GeneralSecurityException e)
{
throw new IllegalStateException("unable to rebuild certpath");
}
I am confused why it provided "BC" as provider name to CertificateFactory.getInstance method instead of "BCFIPS". How can I use this class with "BCFIPS" provider?