Support FIPS compliant BC

[strehle]

Support https://www.bouncycastle.org/fips-java/ instead of only https://www.bouncycastle.org/java.html

CF seems to provide FIPS containers, e.g. cloudfoundry/uaa-release#358 but then UAA should support FIPS in runtime

[cf-gitbot]

We have created an issue in Pivotal Tracker to manage this:

https://www.pivotaltracker.com/story/show/184630015

The labels on this github issue will be updated when the story is started.

[strehle]

Plan:
SAML2 , signing done via opensaml #2561, wait until update of opensaml , then enable FIPS in BC

OIDC done with deprecated #2229 , move to jose-jwt and then enable FIPS in BC initialization

[Tallicia]

Do we need to to wait for the update of openSAML to enable FIPS in BC? We have had FIPS compliant releases with bionic with the existing SAML and BC libraries.

[strehle]

Do we need to to wait for the update of openSAML to enable FIPS in BC? We have had FIPS compliant releases with bionic with the existing SAML and BC libraries.

not necessarily, but I would like to first merge #2624 and then I can start on working to move towards BC with FIPs.

[Tallicia]

#2624 is merged, so this is likely ready as well @hsinn0 is this on your radar?

[hsinn0]

so this is likely ready as well @hsinn0 is this on your radar?

@Tallicia, not sure what you mean. Our tribute handles SAP PRs not Issues.

[strehle]

so this is likely ready as well @hsinn0 is this on your radar?

@Tallicia, not sure what you mean. Our tribute handles SAP PRs not Issues.

finally here the PR #2693