commit e84902c4c54ac41ea5dc8aa2cdde0282beb56f1f
author Jia Zhai <zhaijia@apache.org> Sat Mar 28 18:34:57 2020 +0800
committer GitHub <noreply@github.com> Sat Mar 28 03:34:57 2020 -0700
tree e30874fbc146569a4f75b509712e241e5c7efde9
parent adf38675ec52e038b14c408c35bddd50c0e7c841

Support BouncyCastle FIPS provider  (#6588)

### Motivation

Try to make user able to use both "org.bouncycastle.jce.provider.BouncyCastleProvider" and  "org.bouncycastle.jcajce.provider.BouncyCastleFipsProvider".

Current code, bouncycastle (bc) jars  are used in both broker and client, and are tied strongly in both broker and client.  We need to make it easy config. This change try to split bc and module that depends on it. Then user could freely include/exclude it.

### Changes
- build a shaded jar for bouncycastle non-fips version. other module depends on this module.
- build nar for both fips and non-fips version of bouncycastle, user could able to load bouncycastle by these 2 nar.
- split MessageCrypto out from client and made it an individual module.  so client is able to exclude bouncycastle.
- Add 2 test examples:  1, exclude bc-non-fips version, and include bc-fips version; 2, exclude bc-non-fips version and load bc-fips version by nar.

distribution/server/pom.xml

diff --git a/distribution/server/pom.xml b/distribution/server/pom.xml
index abf569f..9942b7f 100644
--- a/distribution/server/pom.xml
+++ b/distribution/server/pom.xml
@@ -146,6 +146,11 @@
           <groupId>io.grpc</groupId>
           <artifactId>*</artifactId>
         </exclusion>
+        <!-- bouncy-castle-bc-shaded already contains this-->
+        <exclusion>
+          <groupId>org.bouncycastle</groupId>
+          <artifactId>*</artifactId>
+        </exclusion>
       </exclusions>
     </dependency>
 

distribution/server/src/assemble/LICENSE.bin.txt

diff --git a/distribution/server/src/assemble/LICENSE.bin.txt b/distribution/server/src/assemble/LICENSE.bin.txt
index 3e17c87..827864d 100644
--- a/distribution/server/src/assemble/LICENSE.bin.txt
+++ b/distribution/server/src/assemble/LICENSE.bin.txt
@@ -568,12 +568,6 @@
 Public Domain (CC0) -- licenses/LICENSE-CC0.txt
  * Reactive Streams -- org.reactivestreams-reactive-streams-1.0.2.jar
 
-Bouncy Castle License
- * Bouncy Castle -- licenses/LICENSE-bouncycastle.txt
-    - org.bouncycastle-bcpkix-jdk15on-1.60.jar
-    - org.bouncycastle-bcprov-jdk15on-1.60.jar
-    - org.bouncycastle-bcprov-ext-jdk15on-1.60.jar
-
 Creative Commons Attribution License
  * Jcip -- licenses/LICENSE-jcip.txt
     - net.jcip-jcip-annotations-1.0.jar