Skip to content

Commit c9061a3

Browse files
committed
Fix FIPS compatibility by using default KeyManagerFactory algorithm
Use KeyManagerFactory.getDefaultAlgorithm() instead of hardcoded "SunX509" to support FIPS-compliant security providers like Bouncy Castle that do not support the SunX509 algorithm.
1 parent f90715c commit c9061a3

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

token-client/src/main/java/com/sap/cloud/security/mtls/SSLContextFactory.java

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -93,7 +93,7 @@ public SSLContext create(String x509Certificates, String privateKey)
9393
*/
9494
public SSLContext create(ClientIdentity clientIdentity) throws GeneralSecurityException, IOException {
9595
KeyStore keystore = createKeyStore(clientIdentity);
96-
KeyManagerFactory keyManagerFactory = KeyManagerFactory.getInstance("SunX509");
96+
KeyManagerFactory keyManagerFactory = KeyManagerFactory.getInstance(KeyManagerFactory.getDefaultAlgorithm());
9797
keyManagerFactory.init(keystore, noPassword);
9898
SSLContext sslContext = createDefaultSSLContext();
9999
sslContext.init(keyManagerFactory.getKeyManagers(), null, null);

0 commit comments

Comments
 (0)