Java Code/Java Method activity with custom Java code that uses non-FIPS Bouncy Castle library fails after upgrading to a TRA version that includes Bouncy Castle FIPS library

Java Code/Java Method activity with custom Java code that uses non-FIPS Bouncy Castle library fails after upgrading to a TRA version that includes Bouncy Castle FIPS library

book

Article ID: KB0072431

calendar_today

Updated On:

Products Versions
TIBCO ActiveMatrix BusinessWorks 5.13.x, 5.14.x, 5.15.x

Description

Newer versions of TRA (TRA 5.10.2 and above, TRA 5.11.1 and above, TRA 5.12) include Bouncy Castle FIPS library. When upgrading to one of these versions, any custom Java code that uses non-FIPS Bouncy Castle library may fail because of incompatibilities with the classes loaded from the FIPS library JAR files.

Resolution

To resolve the issue, there are two options.

Option 1 -
Rewrite the custom Java code to use Bouncy Castle FIPS library.

Option 2 (applicable only if j2se is used as security vendor) -

Add the location of the non-FIPS library JAR files as the first entry to tibco.env.CUSTOM_EXT_PREPEND_CP in bwengine.tra. Then redeploy the application. If running in Designer, add it as the first entry to tibco.env.CUSTOM_CP_EXT.

Add the following properties to bwengine.tra. Then redeploy the application. If running in Designer, add the properties to designer.tra.

java.property.TIBCO_SECURITY_VENDOR=j2se
java.property.com.tibco.security.dontInstallBcfipsProvider=true

Issue/Introduction

Java Code/Java Method activity with custom Java code that uses non-FIPS Bouncy Castle library fails after upgrading to a TRA version that includes Bouncy Castle FIPS library