Oh, your testing is checking service type Cipher which is Java SE service. It is not the case we discussed in the context: non-Java SE service types.
Xuelei On Tue, Dec 17, 2024 at 2:47 PM Martin Balao <mba...@openjdk.org> wrote: > On Tue, 17 Dec 2024 22:13:09 GMT, Xue-Lei Andrew Fan <xue...@openjdk.org> > wrote: > > > Sorry, I meant BCFIPS provider as linked in the URL I provided. Which > may not be able to use putService as it needs to support back to Java 1.5, > IIRC. Xuelei > > BCFIPS works too (tested on `bc-fips-2.0.0.jar`). In this case, the filter > rule should be `!BCFIPS.Cipher.AES/CBC/PKCS5Padding; *` and the constructor > `org.bouncycastle.jcajce.provider.BouncyCastleFipsProvider`. This is the > output: > > > Cipher AES/CBC/PKCS5Padding (BC): null > Cipher AES/GCM/NoPadding (BC): Cipher.AES/GCM/NoPadding, mode: not > initialized, algorithm from: BCFIPS > > > Please notice that the legacy `Provider::put` API is filtered too. > > ------------- > > PR Comment: https://git.openjdk.org/jdk/pull/15539#issuecomment-2549809277 >
