honeymoose
/
OpenSearch
mirror of https://github.com/honeymoose/OpenSearch.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
OpenSearch/distribution/tools/plugin-cli/licenses/bcpg-fips-1.0.3.jar.sha1

1 line
40 B
Plaintext
Raw Normal View History

Make plugin verification FIPS 140 compliant (#44266) This change makes the process of verifying the signature of official plugins FIPS 140 compliant by defaulting to use the BouncyCastle FIPS provider and adding a dependency to bcpg-fips that implement parts of openPGP in a FIPS compliant manner. In already FIPS 140 enabled environments that use the BouncyCastle FIPS provider, the bcfips dependency is redundant but doesn't cause an issue as it will be added only in the classpath of the cli-tools This is a backport of #44224
2019-07-12 07:34:15 -04:00
e67f464dc25594fa4dca92281e093eab03e170e0