JiriOndrusek commented on PR #6241: URL: https://github.com/apache/camel-quarkus/pull/6241#issuecomment-2214074389
@ppalaga > It is still not clear to me what happens when bcprov is excluded from `crypto-pgp` and replaced with BCFIPS. Have you tried that by any chance? There might be more problems related to this question. The major one is that **bcpg** depends on **bcprov**. Class [BcKeyFingerprintCalculator](https://github.com/bcgit/bc-java/blob/main/pg/src/main/java/org/bouncycastle/openpgp/operator/bc/BcKeyFingerprintCalculator.java#L10) references [org.bouncycastle.crypto.Digest](https://github.com/bcgit/bc-java/blob/main/core/src/main/java/org/bouncycastle/crypto/Digest.java); The same class is not part of the **bcfips**. (I checked the jar downloaded by maven, and you can see it e.g in this [fork](https://github.com/tashiscool/bc-fips/tree/master/core/src/main/java/org/bouncycastle/crypto)) **Therefore it is not possible to replace bcprov with bcfips.** - The only workaround I'm aware of is to have a different bouncycastle fips implementation, which uses different packages. In this case the **bcprov** and **custom_bcfips** can coexist in the project and should work together) - For illustration, the **bcprov** package `org.bouncycastle` contains 11 sub-packages; **bcfip's** `org.bouncycastle` contains 2 sub-packages. (So I expect more possible issues.) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: commits-unsubscr...@camel.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
