Hello All –

I have the task of making sure our Java cryptography implementation is FIPS 
compliant.

I see that the mozilla’s JSS has a JCA provider named Mozilla-JSS outlined here
http://www.mozilla.org/projects/security/pki/jss/provider_notes.html
I have installed on my system jss
[r...@anna-vm1 log]# rpm -qa | grep jss
jss-4.2.5-1.el5.centos.1
And placed in my classpath the jss4.jar file contained in the package.
 
I have found this site showing how to ensure our ssl/tls implementation is FIPS 
compliant
http://java.sun.com/javase/6/docs/technotes/guides/security/jsse/FIPS.html
Using the contents of this document I have modified java.security to this
security.provider.3=com.sun.net.ssl.internal.ssl.Provider Mozilla-JSS

When I launch my application I get the following error
2010-01-25 10:44:32,157|WARN |main|org.jboss.system.ServiceController| Problem 
starting service polycom.proximo:service=TrustProviderCrypto provider not 
installed: Mozilla-JSS
java.security.ProviderException: Crypto provider not installed: Mozilla-JSS

I am not sure if I am running into a configuration problem with Mozilla or some 
other problem with jboss.

Has anyone ever seen this or does anyone have an idea of how I can get this 
crypto provider to be “installed” and utilized in a fips compliant mode per sun 
java docs?

Thanks,
Anna.




      
-- 
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto

Reply via email to