Bc shaded own1

bouncy-castle/bc/pom.xml

@@ -55,9 +55,23 @@
 
   <build>
     <plugins>
+
+      <!-- build a `jar in jar` to avoid break bc signature-->
       <plugin>
-        <groupId>org.apache.nifi</groupId>
-        <artifactId>nifi-nar-maven-plugin</artifactId>
+        <groupId>de.ntcomputer</groupId>
+        <artifactId>executable-packer-maven-plugin</artifactId>
+        <version>1.0.1</version>
+        <configuration>
+          <finalName>${project.artifactId}-${project.version}</finalName>
+          <mainClass>org.apache.pulsar.bcloader.BouncyCastleLoader</mainClass>
+        </configuration>
+        <executions>
+          <execution>
+            <goals>
+              <goal>pack-executable-jar</goal>
+            </goals>
+          </execution>
+        </executions>
       </plugin>
     </plugins>
   </build>

bouncy-castle/bcfips-include-test/pom.xml

@@ -47,7 +47,7 @@
       <exclusions>
         <exclusion>
           <groupId>${project.groupId}</groupId>
-          <artifactId>bouncy-castle-bc-shaded</artifactId>
+          <artifactId>bouncy-castle-bc</artifactId>
         </exclusion>
       </exclusions>
       <type>test-jar</type>
@@ -61,7 +61,7 @@
       <exclusions>
         <exclusion>
           <groupId>${project.groupId}</groupId>
-          <artifactId>bouncy-castle-bc-shaded</artifactId>
+          <artifactId>bouncy-castle-bc</artifactId>
         </exclusion>
       </exclusions>
       <scope>test</scope>

bouncy-castle/bcfips-include-test/src/test/java/org/apache/pulsar/client/TlsProducerConsumerTest.java

@@ -88,13 +88,15 @@ public void testTlsClientAuthOverBinaryProtocol() throws Exception {
             Assert.fail("Server should have failed the TLS handshake since client didn't .");
         } catch (Exception ex) {
             // OK
+            log.info("first test success: without certs set, meet exception {}", ex);
         }
 
         // Test 2 - Using TLS on binary protocol - sending certs
         internalSetUpForClient(true, pulsar.getBrokerServiceUrlTls());
         try {
             pulsarClient.newConsumer().topic("persistent://my-property/use/my-ns/my-topic1")
                     .subscriptionName("my-subscriber-name").subscriptionType(SubscriptionType.Exclusive).subscribe();
+            log.info("second test success: with certs set, consumer sub success");
         } catch (Exception ex) {
             Assert.fail("Should not fail since certs are sent.");
         }
@@ -116,13 +118,15 @@ public void testTlsClientAuthOverHTTPProtocol() throws Exception {
             Assert.fail("Server should have failed the TLS handshake since client didn't .");
         } catch (Exception ex) {
             // OK
+            log.info("first test success: without certs set, meet exception {}", ex);
         }
 
         // Test 2 - Using TLS on https - sending certs
         internalSetUpForClient(true, pulsar.getWebServiceAddressTls());
         try {
             pulsarClient.newConsumer().topic("persistent://my-property/use/my-ns/my-topic1")
                     .subscriptionName("my-subscriber-name").subscriptionType(SubscriptionType.Exclusive).subscribe();
+            log.info("second test success: with certs set, consumer sub success");
         } catch (Exception ex) {
             Assert.fail("Should not fail since certs are sent.");
         }