From 6de8d71da5c3ff81091c756271b62fb57b5cfd9a Mon Sep 17 00:00:00 2001
From: Bjørn Christian Seime <bjorncs@oath.com>
Date: Tue, 11 Sep 2018 18:00:13 +0200
Subject: Use BouncyCastle as provider for JKS keystore

Fixes an issue where KeyStoreBuilder fails to handle elliptic-curve crypto on older versions of OpenJDK
---
 vespajlib/src/main/java/com/yahoo/security/KeyStoreType.java | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'vespajlib')

diff --git a/vespajlib/src/main/java/com/yahoo/security/KeyStoreType.java b/vespajlib/src/main/java/com/yahoo/security/KeyStoreType.java
index 7fb8df35286..ae6e5d9c077 100644
--- a/vespajlib/src/main/java/com/yahoo/security/KeyStoreType.java
+++ b/vespajlib/src/main/java/com/yahoo/security/KeyStoreType.java
@@ -11,7 +11,7 @@ import java.security.KeyStoreException;
 public enum KeyStoreType {
     JKS {
         KeyStore createKeystore() throws KeyStoreException {
-            return KeyStore.getInstance("JKS");
+            return KeyStore.getInstance("BKS", BouncyCastleProviderHolder.getInstance());
         }
     },
     PKCS12 {
-- 
cgit v1.2.3