From 118af16df69d681ebfc77d40fab0cb4fafbdb88c Mon Sep 17 00:00:00 2001
From: Chris Conlon <chris@wolfssl.com>
Date: Wed, 8 Jul 2026 14:00:17 -0600
Subject: [PATCH] F-4363: use value equality for FIPS sigProvider check in
 engineValidate

---
 .../wolfssl/provider/jce/WolfCryptPKIXCertPathValidator.java    | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/main/java/com/wolfssl/provider/jce/WolfCryptPKIXCertPathValidator.java b/src/main/java/com/wolfssl/provider/jce/WolfCryptPKIXCertPathValidator.java
index ea5a120a..1306e972 100644
--- a/src/main/java/com/wolfssl/provider/jce/WolfCryptPKIXCertPathValidator.java
+++ b/src/main/java/com/wolfssl/provider/jce/WolfCryptPKIXCertPathValidator.java
@@ -1072,7 +1072,7 @@ public class WolfCryptPKIXCertPathValidator extends CertPathValidatorSpi {
 
         /* If we are in FIPS mode, verify wolfJCE is the Signature provider
          * to help maintain FIPS compliance */
-        if (Fips.enabled && pkixParams.getSigProvider() != "wolfJCE") {
+        if (Fips.enabled && !"wolfJCE".equals(pkixParams.getSigProvider())) {
             if (pkixParams.getSigProvider() == null) {
                 /* Preferred Signature provider not set, set to wolfJCE */
                 pkixParams.setSigProvider("wolfJCE");