we do need these

mkleene · mkleene · commit f72479775ef5 · 2026-05-13T16:36:09.000-04:00
diff --git a/sdk/src/test/java.security.fips.test b/sdk/src/test/java.security.fips.test
@@ -1,3 +1,8 @@
+# the default for these is usually SunX509 but BC doesn't
+# support them. tell it to use PKIX instead which is supported by BC
+ssl.KeyManagerFactory.algorithm=PKIX
+ssl.TrustManagerFactory.algorithm=PKIX
+
 securerandom.strongAlgorithms=NativePRNGBlocking:SUN
 
 security.provider.1=org.bouncycastle.jcajce.provider.BouncyCastleFipsProvider
