get ssl working

Author: mkleene

pom.xml

@@ -157,6 +157,11 @@
                 <artifactId>bcprov-jdk18on</artifactId>
                 <version>${bouncycastle.version}</version>
             </dependency>
+            <dependency>
+                <groupId>org.bouncycastle</groupId>
+                <artifactId>bctls-jdk18on</artifactId>
+                <version>${bouncycastle.version}</version>
+            </dependency>
             <!--
                 Pin Byte Buddy for test-time Mockito instrumentation on newer JVMs (e.g. Java 21).
                 This does NOT add a runtime dependency; it only manages the version used by modules.

sdk/pom.xml

@@ -171,6 +171,11 @@
             <artifactId>bcprov-jdk18on</artifactId>
             <scope>test</scope>
         </dependency>
+        <dependency>
+            <groupId>org.bouncycastle</groupId>
+            <artifactId>bctls-jdk18on</artifactId>
+            <scope>test</scope>
+        </dependency>
         <!-- Testing Dependencies -->
         <dependency>
             <groupId>org.junit.jupiter</groupId>

sdk/src/test/java/io/opentdf/platform/sdk/CryptoProviderSetupExtension.java

@@ -1,6 +1,7 @@
 package io.opentdf.platform.sdk;
 
 import org.bouncycastle.jce.provider.BouncyCastleProvider;
+import org.bouncycastle.jsse.provider.BouncyCastleJsseProvider;
 import org.junit.jupiter.api.extension.BeforeAllCallback;
 import org.junit.jupiter.api.extension.ExtensionContext;
 
@@ -14,13 +15,8 @@ public class CryptoProviderSetupExtension implements BeforeAllCallback {
     @Override
     public synchronized void beforeAll(ExtensionContext extensionContext) {
         if (this.securityProvider == null) {
-            var existingProviders =  Security.getProviders();
-            Arrays.asList(existingProviders).stream().map(Provider::getName).forEach(Security::removeProvider);
-            if (Security.getProviders().length != 0) {
-                throw new IllegalStateException("unable to remove all providers");
-            }
-
-            Security.addProvider(this.securityProvider = new BouncyCastleProvider());
+            Security.insertProviderAt(this.securityProvider = new BouncyCastleProvider(), 1);
+            Security.insertProviderAt(new BouncyCastleJsseProvider(), 2);
         }
     }
 }

sdk/src/test/java/io/opentdf/platform/sdk/SDKBuilderTest.java

@@ -161,11 +161,13 @@ void sdkServicesSetup(boolean useSSLPlatform, boolean useSSLIDP) throws Exceptio
 
         HeldCertificate rootCertificate = new HeldCertificate.Builder()
                 .certificateAuthority(0)
+                .rsa2048()
                 .build();
         String localhost = InetAddress.getByName("localhost").getCanonicalHostName();
         HeldCertificate serverCertificate = new HeldCertificate.Builder()
                 .addSubjectAlternativeName(localhost)
-                .commonName("CN=localhost")
+                .rsa2048()
+                .commonName("localhost")
                 .signedBy(rootCertificate)
                 .build();