Use FIPS compliant keystore for signatures

[nynymike]

This acticle provides an overview of the issue: https://docs.oracle.com/en/middleware/fusion-middleware/weblogic-server/12.2.1.4/secmg/fips.html#GUID-A9A51C8D-EB78-4BCC-B865-576580FCB8F1

The default JKS keystore with CA certificates, cacerts, included with the JDK is not FIPS compliant. FIPS 140-2 requires a PKCS12 PBES2 keystore; JKS keystores and PKCS12 keystores created with keytool using the Sun JSSE provider (the default) are not supported. If you are using the default JDK cacerts keystore, you need to complete the following steps to ensure FIPS compliance:

• Convert the JDK cacerts keystore from JKS to PKCS12 format
• Convert the PKCS12 keystore using the RSA JCE provider to be FIPS compliant
• Set Java system properties to update the default trust store used by Java