475752be75
This change makes the process of verifying the signature of official plugins FIPS 140 compliant by defaulting to use the BouncyCastle FIPS provider and adding a dependency to bcpg-fips that implement parts of openPGP in a FIPS compliant manner. In already FIPS 140 enabled environments that use the BouncyCastle FIPS provider, the bcfips dependency is redundant but doesn't cause an issue as it will be added only in the classpath of the cli-tools This is a backport of #44224 |
||
|---|---|---|
| .. | ||
| bc-fips-1.0.1.jar.sha1 | ||
| bcpg-fips-1.0.3.jar.sha1 | ||
| bouncycastle-LICENSE.txt | ||
| bouncycastle-NOTICE.txt | ||