bc-fips-2.0.0.jar non-exported packages are used by bcpkix-fips-2.0.7.jar and bcpg-fips-2.0.9.jar

[marnix]

For BC-FJA 2.0.x, we discovered that the PKIX and PGP libraries use/import packages which are not exported by bc-fips-2.0.0.jar, when used as a Java 9+ module (org.bouncycastle.fips.core).

Specifically,

• bcpkix-fips-2.0.7 does import org.bouncycastle.asn1.isara.IsaraObjectIdentifiers; in multiple places
• bcpg-fips-2.0.9 (and likely 2.0.10) does import org.bouncycastle.asn1.cryptlib.CryptlibObjectIdentifiers; in multiple places

while neither org.bouncycastle.asn1.isara nor org.bouncycastle.asn1.cryptlib are in bc-fips-2.0.0.jar in META-INF\versions\9\module-info.class.

---

The obvious workaround that works for us, is to use --add-opens (--add-exports would presumably also work), to allow both org.bouncycastle.fips.core/org.bouncycastle.asn1.isara and org.bouncycastle.fips.core/org.bouncycastle.asn1.cryptlib to be used from our own module.