I looked into the FIPS failures for github.com/OpenVoxProject/trapperkeeper-webserver/pull/152 and what worked for me in the end was to regenerate

dev-resources/config/jetty/ssl/certs/localhost.pem

with a SAN of

DNS:localhost

. This must be because of strictness in newer versions of bouncy castle libraries. Anyone has any history about how to generate files in

dev-resources/config/jetty/ssl

? If

localhost.pem

is the only one that I regenerate, how many days of expiry? Current cert and CA do not expire until 2029. Thoughts?