I have a .jks file that’s being used for the keystore to launch an application through tomcat 9.
I believe the .jks file isn’t FIPS compliant because some of the algorithms being used are SHA1. Which from what I understand, isn’t FIPS compliant. My question is, does converting a file from .jks to a .bcfks file automatically make it FIPS compliant or are there other factors besides the file format?
I’m sorry if this is a very basic question but I’m new to FIPS and I’ve struggled to find a clear explanation on what exactly makes something FIPS compliant.
I’m attempting to convert a .jks format keystore file into a bcfks format using the bcprov-jdk-1.64.jar file and the following keytool command:
keytool -importkeystore -srckeystore trust.jks -srcstoretype JKS -srcstorepass -destkeystore trust.bcfks -deststorepass -deststoretype BCFKS -provider org.bouncycastle.jce.provider.BouncyCastleProvider -providerpath ./BouncyCastle/bcprov-jdk15on-1.64.jar