-
Notifications
You must be signed in to change notification settings - Fork 19
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[2.0] Research continued FIPS 140-2 Compliance #767
Comments
We also need to understand the ramifications of the changes in #769 (the addition of --ignore-signing-information) that were required to build the jar with BouncyCastle. SO has some details here |
From Slack convo:
|
@artoonie created #770 to bring --ignore-signing-information into |
#765 added the BouncyCastle library to RCTab 1.3.2 in order to satisfy FIPS 140-2 compliance mandated in California Voting System Standards (CVSS). 2.0 upgrades Java to Java 20. Those BouncyCastle libraries are not compatible with Java 20.
We need to make a decision on how to move forward in 2.0: do we find another FIPS 140-2 compliant library? Do we downgrade to an earlier Java version that is compatible with BouncyCastle? Do we somehow implement a two build system, one for CA and one for other jurisdictions?
The text was updated successfully, but these errors were encountered: