You are viewing a plain text version of this content. The canonical link for it is here.

Posted to commits@santuario.apache.org by "Sudeep Das (Jira)" <ji...@apache.org> on 2021/09/07 01:32:00 UTC

[jira] [Created] (SANTUARIO-578) Enable configurable Random number generator in initialization of XMLSecurityConstants

Sudeep Das created SANTUARIO-578:
------------------------------------

             Summary: Enable configurable Random number generator in initialization of XMLSecurityConstants
                 Key: SANTUARIO-578
                 URL: https://issues.apache.org/jira/browse/SANTUARIO-578
             Project: Santuario
          Issue Type: Improvement
      Security Level: Public (Public issues, viewable by everyone)
          Components: Java
    Affects Versions: Java 2.1.2
            Reporter: Sudeep Das
            Assignee: Colm O hEigeartaigh


Use of hard coded PRNG in XMLSecurityConstants makes it impossible to configure the RNG. SHA1PRNG cannot be used in FIPS 140-2 approved mode 

The change is simple enough via a system property and I can contribute a PR for this if it helps



--
This message was sent by Atlassian Jira
(v8.3.4#803005)