jricher/OpenID-Connect-Java-Spring-Server — comment on commit f17eba9cdc7f4882d28ca9a69fb565daa4f58a12
File:  line 0
By nemonik:

As I rolled out the BC provider, Keystore.jks files are now of type JKS. If you run into provider issues. You will need to install "Java Cryptography Extension (JCE) Unlimited Strength Jurisdiction Policy Files 6" found here:

http://www.oracle.com/technetwork/java/javase/downloads/index.html

As far as I know this cannot be mavenize as to the need to accept the "Java SE BCL License Agreement" amongst other reasons.

And if there are other concerns (signing/encryption performance, and algorithms) we may need to revisit the use of the BC provider, and its static installation.