OpenSearch/distribution/tools/plugin-cli/licenses
Ioannis Kakavas 475752be75
Make plugin verification FIPS 140 compliant (#44266)
This change makes the process of verifying the signature of
official plugins FIPS 140 compliant by defaulting to use the
BouncyCastle FIPS provider and adding a dependency to bcpg-fips
that implement parts of openPGP in a FIPS compliant manner.

In already FIPS 140 enabled environments that use the 
BouncyCastle FIPS provider, the bcfips dependency is redundant
but doesn't cause an issue as it will be added only in the classpath
 of the cli-tools

This is a backport of #44224
2019-07-12 14:34:15 +03:00
..
bc-fips-1.0.1.jar.sha1 Make plugin verification FIPS 140 compliant (#44266) 2019-07-12 14:34:15 +03:00
bcpg-fips-1.0.3.jar.sha1 Make plugin verification FIPS 140 compliant (#44266) 2019-07-12 14:34:15 +03:00
bouncycastle-LICENSE.txt Verify signatures on official plugins (#30800) 2018-05-25 07:56:35 -04:00
bouncycastle-NOTICE.txt Verify signatures on official plugins (#30800) 2018-05-25 07:56:35 -04:00