[ENHANCEMENT] Refactor asn1TaggedObject.getObject() call #4728
Labels
enhancement
New feature or request
triaged
Issues labeled as 'Triaged' have been reviewed and are deemed actionable.
Is your feature request related to a problem?
With the view of working towards supporting multiple security providers (FIPS and non-FIPS) the call to asn1TaggedObject.getObject() in DefaultSecurityKeyStore can be refactored to support the methods available in either library.
What solution would you like?
Use reflection to refactor asn1TaggedObject.getObject() in DefaultSecurityKeyStore depending on the provider in the classpath.
See code from original Proof of Concept
2.11...terryquigleysas:security:2.11#diff-a491b91660e8230b6a8806f07ba0ec35c8d22a92f69411a81d156be58fffa9bdL1180
What alternatives have you considered?
The security plugin cannot be changed to use the FIPS Bouncy Castle libraries alone as it would break OpenSAML use and extensive associated work is required for these to work with OpenSearch core and potentially certain other plugins.
Do you have any additional context?
See related issues:
#3420
#1497
#1500
#3317
#4583
#4587
The text was updated successfully, but these errors were encountered: