How does NetWeaver support FIPS in java part?

[xionghe]

As we know,  default JDK doesn't support FIPS in the SSL/TLS socket.

There are 3rdpart soft, like certicom, bsafe can support this.

And in the opensource, NSS + jdk, seems can be a solution.

Here, just a question, how does NetWeaver support FIPS in java part?  Is there an internal implementation?

Thanks.

Message was edited by: Andy Silvey

[Former Member · Accepted solution]

FIPS certification of CommonCryptoLib is still in process hence it is marked as not compliant but I guess the functionality is there. See SAP note 1848999 for details.

[xionghe · Accepted solution]

Thanks so much. One more question,  is there a java wrapper for the CommonCryptoLib?

[Former Member · Accepted solution]

I'm not aware of any. The library is backwards compatible so you should be able to replace an existing SAP Cryptographic Library with CommonCryptoLib. The Crypto Kernel implementation seems to exist only for AS ABAP. Maybe someone working on security at SAP can comment, I will ping the space to get their attention.