Details
-
Improvement
-
Status: Resolved
-
Major
-
Resolution: Fixed
-
None
-
None
-
Unknown
Description
In order to run crypto component on FIPS systems we have to use BC-FIPS instead of standard bouncycastle.
- PGPDataFormat uses BC APIs but does not require any BC security provider, therefore BCFIPS can not be used as a replacement for PGP APIs.
- Another restriction is that BC and BCFIps can not co-exist on the classpath.
- Therefore crypto component can not contain PGP, to allow BC-FIPS substitution
The new component with PGP data format should be called probably camel-crypto-pgp