Andrey Stolyarchuk

Results 4 issues of Andrey Stolyarchuk

Plugin id was changed from 'nebula.ospackage' to 'com.netflix.nebula.ospackage'

### Fix 'ssl.KeyManagerFactory.algorithm' security property retrieving ### Issue SslContextFactory has DFLT_KEY_ALGORITHM constant which by default tries to retrieve 'ssl.KeyManagerFactory.algorithm' value from the system property. But, according to Java specification (https://docs.oracle.com/en/java/javase/17/docs/api/java.base/javax/net/ssl/KeyManagerFactory.html,...

Hello, Do you have plans to include org.bouncycastle.jce.provider.ProvRevocationChecker into FIPS version of bc library? It is required for OCSP with TLS because currently org.bouncycastle.jsse.provider.JsseUtils_8#addStatusResponses cannot find an implementation of PKIXRevocationChecker...

Hello, I've discovered that OCSP was not implemented for TLS 1.3. org.bouncycastle.tls.TlsClientProtocol#certificateStatus variable can be set by org.bouncycastle.tls.TlsClientProtocol#handleHandshakeMessage method but not by org.bouncycastle.tls.TlsClientProtocol#handle13HandshakeMessage method. Therefore, org.bouncycastle.jsse.provider.TransportData#getStatusResponses() is always empty when...