[iText-questions] Bouncy Castle
Hi, I was interested in using your iTextSharp library and ran into problems. I already use Bouncy Castle and when I add a reference to iTextSharp it gives me errors telling me the Bouncy Castle methods already exist. Is there anything I can do to avoid these namespace errors? Thanks, Nikolai -- Android is increasing in popularity, but the open development platform that developers love is also attractive to malware creators. Download this white paper to learn more about secure code signing practices that can help keep Android apps secure. http://pubads.g.doubleclick.net/gampad/clk?id=65839951iu=/4140/ostg.clktrk___ iText-questions mailing list iText-questions@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/itext-questions iText(R) is a registered trademark of 1T3XT BVBA. Many questions posted to this list can (and will) be answered with a reference to the iText book: http://www.itextpdf.com/book/ Please check the keywords list before you ask for examples: http://itextpdf.com/themes/keywords.php
[iText-questions] bouncy castle?
Sorry for the delay, been out of commission... I completely understand the desire to not have to maintain fragile/ buggy code related to encryption, but why not use an interfaced based solution so that those that want to create a smaller distribution can? Again, I am willing to do that work, and I will provide an implementation that uses 'bouncy castle', as long as I have some degree of assurance the code will be accepted. Why is this so difficult? It is fairly common practice for most open- source projects (and even good commercial ones), to limit hard dependencies to other projects when possible. Robert - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT business topics through brief surveys-and earn cash http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV ___ iText-questions mailing list iText-questions@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/itext-questions Buy the iText book: http://itext.ugent.be/itext-in-action/
Re: [iText-questions] bouncy castle?
I can't make any promises but you are free to present your code. Paulo - Original Message - From: robert engels [EMAIL PROTECTED] To: itext iText here itext-questions@lists.sourceforge.net Sent: Friday, March 09, 2007 6:57 PM Subject: [iText-questions] bouncy castle? Sorry for the delay, been out of commission... I completely understand the desire to not have to maintain fragile/ buggy code related to encryption, but why not use an interfaced based solution so that those that want to create a smaller distribution can? Again, I am willing to do that work, and I will provide an implementation that uses 'bouncy castle', as long as I have some degree of assurance the code will be accepted. Why is this so difficult? It is fairly common practice for most open- source projects (and even good commercial ones), to limit hard dependencies to other projects when possible. Robert - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT business topics through brief surveys-and earn cash http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV ___ iText-questions mailing list iText-questions@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/itext-questions Buy the iText book: http://itext.ugent.be/itext-in-action/ - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT business topics through brief surveys-and earn cash http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV ___ iText-questions mailing list iText-questions@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/itext-questions Buy the iText book: http://itext.ugent.be/itext-in-action/
Re: [iText-questions] bouncy castle (Paulo Soares)
What changed from 1.4.8 was the certificate encryption that needs the CMS code from BouncyCastle. This CMS code depends on a lot of other BouncyCastle code and it's not feasible to extract all this and include it in iText. Furthermore, I also want to simplify PdfPKCS7 with the BouncyCastle capabilities instead of doing all by hand and having reports in the mailing list saying that some algorithm was not recognized. The BouncyCastle jars will have to stay. Paulo -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Paulo Soares Sent: Friday, March 02, 2007 11:30 PM To: Post all your questions about iText here Subject: Re: [iText-questions] bouncy castle (Paulo Soares) I'll get back to you later on this. Paulo - Original Message - From: robert engels [EMAIL PROTECTED] To: itext iText here itext-questions@lists.sourceforge.net Sent: Friday, March 02, 2007 6:26 PM Subject: Re: [iText-questions] bouncy castle (Paulo Soares) Paulo, Maybe there is a better way. I have 2 motivating factors: 1. Limit the deployment size. The bouncy castle jars are as large as the iText jar. Maybe a 'thin BC can be distributed with iText that only contains the ASN functions? Or just implement the ASN1 functions in iText? 2. Limit the outside dependencies. Since iText uses the BC api directly, there might be compatibility problems in the future if the BC api changes, yet other systems need the latest BC api. I am trying to avoid Windows 'DLL Hell'. If the JCE does not cover needed complex operations that are required, then I can see the need for using BC directly. But it seems that most of these are fairly simple utility methods (if I understand it correctly). Maybe if you were more specific about what is needed in BC that is not available in JCE, I can work on writing that code. Robert Aviso Legal: Esta mensagem é destinada exclusivamente ao destinatário. Pode conter informação confidencial ou legalmente protegida. A incorrecta transmissão desta mensagem não significa a perca de confidencialidade. Se esta mensagem for recebida por engano, por favor envie-a de volta para o remetente e apague-a do seu sistema de imediato. É proibido a qualquer pessoa que não o destinatário de usar, revelar ou distribuir qualquer parte desta mensagem. Disclaimer: This message is destined exclusively to the intended receiver. It may contain confidential or legally protected information. The incorrect transmission of this message does not mean the loss of its confidentiality. If this message is received by mistake, please send it back to the sender and delete it from your system immediately. It is forbidden to any person who is not the intended receiver to use, distribute or copy any part of this message. - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT business topics through brief surveys-and earn cash http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV___ iText-questions mailing list iText-questions@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/itext-questions Buy the iText book: http://itext.ugent.be/itext-in-action/
Re: [iText-questions] bouncy castle
Concerning BouncyCastle versions. I have read about the iText 2 specs, that it will work on Java 5. But what about the BouncyCastle jars. Do I need to download the jdk 1.5 jars or will the jdk 1.4 do the work? 2007/3/2, Paulo Soares [EMAIL PROTECTED]: Unfortunately iText needs more than algorithms and RSA public/private key implementation, most of those already present in jdk 1.4. There's also PKCS#7 assembly and disassembly and other asn1 operations that the jce doesn't give you. Even if jdk 1.5 could provide all that, iText won't leave jdk 1.4 in the near future. By the way, the jce is still used for the algorithms and signature, BouncyCastle is/will be used for high level asn1 manipulation and a few other things. I fail to see why you are so desperate to kill BouncyCastle and add layers of indirection and multiple implementations, I have enough work as it is. Maybe I'm missing the point here. If that's the case please prepare your code implementation so that this can be discussed grounded on something tangible. Paulo -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of robert engels Sent: Friday, March 02, 2007 5:21 PM To: itext iText here Subject: [iText-questions] bouncy castle paul, I think you misunderstand the JCE system or what I am stating - although I did not use the term provider correctly in the strictest sense. The SUN provider in 1.5 includes significantly more cryptography algorithms than the 1.4 and prior releases - most importantly it includes an RSA public/private key implementation. One point you make that is almost correct, is that it does make it easier to easier to port to C#, but it is not a direct compile anyway, so I am not sure why the Java version wouldn't use JCE. Even so, supporting both easily only requires an additional layer of indirection, just create a PdfCryptography interface. There can be a implementation that uses JCE, and an implementation that uses bouncy castle directly. The C# version would probably only port over the 'bouncy castle' version. Maybe if you can explain why using bouncy castle directly is a good solution I could understand this, and why the extra layer of indirection is not a valid solution. Thanks, Robert -- --- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT business topics through brief surveys-and earn cash http://www.techsay.com/default.php?page=join.phpp=sourceforge CID=DEVDEV ___ iText-questions mailing list iText-questions@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/itext-questions Buy the iText book: http://itext.ugent.be/itext-in-action/ Aviso Legal: Esta mensagem é destinada exclusivamente ao destinatário. Pode conter informação confidencial ou legalmente protegida. A incorrecta transmissão desta mensagem não significa a perca de confidencialidade. Se esta mensagem for recebida por engano, por favor envie-a de volta para o remetente e apague-a do seu sistema de imediato. É proibido a qualquer pessoa que não o destinatário de usar, revelar ou distribuir qualquer parte desta mensagem. Disclaimer: This message is destined exclusively to the intended receiver. It may contain confidential or legally protected information. The incorrect transmission of this message does not mean the loss of its confidentiality. If this message is received by mistake, please send it back to the sender and delete it from your system immediately. It is forbidden to any person who is not the intended receiver to use, distribute or copy any part of this message. - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT business topics through brief surveys-and earn cash http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV ___ iText-questions mailing list iText-questions@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/itext-questions Buy the iText book: http://itext.ugent.be/itext-in-action/ - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT business topics through brief surveys-and earn cash http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV___ iText-questions mailing list iText-questions@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/itext-questions Buy the iText book: http://itext.ugent.be/itext-in-action/
Re: [iText-questions] bouncy castle
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Iliadis Yannis Sent: Wednesday, March 07, 2007 3:50 PM To: Post all your questions about iText here Subject: Re: [iText-questions] bouncy castle Concerning BouncyCastle versions. I have read about the iText 2 specs, that it will work on Java 5. But what about the BouncyCastle jars. Do I need to download the jdk 1.5 jars or will the jdk 1.4 do the work? The 1.4 will work (I'm using it with java 5) but it's advisable to get the right version if you are going to use it as provider. Paulo 2007/3/2, Paulo Soares [EMAIL PROTECTED]: Unfortunately iText needs more than algorithms and RSA public/private key implementation, most of those already present in jdk 1.4. There's also PKCS#7 assembly and disassembly and other asn1 operations that the jce doesn't give you. Even if jdk 1.5 could provide all that, iText won't leave jdk 1.4 in the near future. By the way, the jce is still used for the algorithms and signature, BouncyCastle is/will be used for high level asn1 manipulation and a few other things. I fail to see why you are so desperate to kill BouncyCastle and add layers of indirection and multiple implementations, I have enough work as it is. Maybe I'm missing the point here. If that's the case please prepare your code implementation so that this can be discussed grounded on something tangible. Paulo -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of robert engels Sent: Friday, March 02, 2007 5:21 PM To: itext iText here Subject: [iText-questions] bouncy castle paul, I think you misunderstand the JCE system or what I am stating - although I did not use the term provider correctly in the strictest sense. The SUN provider in 1.5 includes significantly more cryptography algorithms than the 1.4 and prior releases - most importantly it includes an RSA public/private key implementation. One point you make that is almost correct, is that it does make it easier to easier to port to C#, but it is not a direct compile anyway, so I am not sure why the Java version wouldn't use JCE. Even so, supporting both easily only requires an additional layer of indirection, just create a PdfCryptography interface. There can be a implementation that uses JCE, and an implementation that uses bouncy castle directly. The C# version would probably only port over the 'bouncy castle' version. Maybe if you can explain why using bouncy castle directly is a good solution I could understand this, and why the extra layer of indirection is not a valid solution. Thanks, Robert Aviso Legal: Esta mensagem é destinada exclusivamente ao destinatário. Pode conter informação confidencial ou legalmente protegida. A incorrecta transmissão desta mensagem não significa a perca de confidencialidade. Se esta mensagem for recebida por engano, por favor envie-a de volta para o remetente e apague-a do seu sistema de imediato. É proibido a qualquer pessoa que não o destinatário de usar, revelar ou distribuir qualquer parte desta mensagem. Disclaimer: This message is destined exclusively to the intended receiver. It may contain confidential or legally protected information. The incorrect transmission of this message does not mean the loss of its confidentiality. If this message is received by mistake, please send it back to the sender and delete it from your system immediately. It is forbidden to any person who is not the intended receiver to use, distribute or copy any part of this message. - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT business topics through brief surveys-and earn cash http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV___ iText-questions mailing list iText-questions@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/itext-questions Buy the iText book: http://itext.ugent.be/itext-in-action/
Re: [iText-questions] bouncy castle requirement?
robert engels wrote: Curious. Why is there a direct dependency on the bouncy castle jars? Because we are planning to use more BC functionality in the future. Can't iText use the standard Java encryption packages (which will locate the needed provider)? I believe you implicitly gave the answer to this question in your next post: we'd need JDK 1.5+ There are many, many developers out there who aren't ready yet to move to Java5. Not because they don't want to, but purely for practical reasons. For many of them, even the fact that iText is compiled with the JDK 1.4 makes it difficult to use iText (yes, some people are still using JDK 1.2 and 1.3). If iText requires the use of JDK 1.5, we will lose a lot of users. Of course that's just my point of view; this is a good topic for an open discussion. br, Bruno - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT business topics through brief surveys-and earn cash http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV ___ iText-questions mailing list iText-questions@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/itext-questions Buy the iText book: http://itext.ugent.be/itext-in-action/
Re: [iText-questions] bouncy castle requirement?
My point was, if you use the standard Java interfaces, a user that is running Java 1.3 or 1.4 can install the bouncy castle provider jars and it will work. A user that is running 1.5 does not need the bouncy castle jars since the provider is already there. With the current code, all users must install the bouncy castle jars, including the 1.5 users. I am willing to work on a patch to allow have iText use the standard java JCE interfaces if there was reasonable certainty of it being accepted. Robert - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT business topics through brief surveys-and earn cash http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV ___ iText-questions mailing list iText-questions@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/itext-questions Buy the iText book: http://itext.ugent.be/itext-in-action/
Re: [iText-questions] bouncy castle requirement?
robert engels wrote: I am willing to work on a patch to allow have iText use the standard java JCE interfaces if there was reasonable certainty of it being accepted. Sounds interesting. Paulo has the final word on everything that concerns signatures. Let's hear what he thinks about it. br, Bruno - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT business topics through brief surveys-and earn cash http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV ___ iText-questions mailing list iText-questions@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/itext-questions Buy the iText book: http://itext.ugent.be/itext-in-action/
Re: [iText-questions] bouncy castle requirement?
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of robert engels Sent: Friday, March 02, 2007 4:12 PM To: itext iText here Subject: Re: [iText-questions] bouncy castle requirement? My point was, if you use the standard Java interfaces, a user that is running Java 1.3 or 1.4 can install the bouncy castle provider jars and it will work. The jars must be there but BouncyCastle need not be a provider. A user that is running 1.5 does not need the bouncy castle jars since the provider is already there. In all the jdk after 1.4 there's only one provider installed called SUN. You can install other providers like BouncyCastle, called BC. Having 1.5 doesn't give you any extra provider out of the sky. Either that or I don't understand the meaning of provider here. With the current code, all users must install the bouncy castle jars, including the 1.5 users. See above. Note that the BouncyCastle jars do a lot more than just complement the existing algorithms. I am willing to work on a patch to allow have iText use the standard java JCE interfaces if there was reasonable certainty of it being accepted. Don't bother. I struggled a lot before deciding for the extra jars (I too like small single jars) but signatures and security are not getting any easier and it's difficult to justify the extra iText complexity when BouncyCastle has most that is needed. Furthermore, using BouncyCastle also makes it easier to do the porting to C#. Paulo Aviso Legal: Esta mensagem é destinada exclusivamente ao destinatário. Pode conter informação confidencial ou legalmente protegida. A incorrecta transmissão desta mensagem não significa a perca de confidencialidade. Se esta mensagem for recebida por engano, por favor envie-a de volta para o remetente e apague-a do seu sistema de imediato. É proibido a qualquer pessoa que não o destinatário de usar, revelar ou distribuir qualquer parte desta mensagem. Disclaimer: This message is destined exclusively to the intended receiver. It may contain confidential or legally protected information. The incorrect transmission of this message does not mean the loss of its confidentiality. If this message is received by mistake, please send it back to the sender and delete it from your system immediately. It is forbidden to any person who is not the intended receiver to use, distribute or copy any part of this message. - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT business topics through brief surveys-and earn cash http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV___ iText-questions mailing list iText-questions@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/itext-questions Buy the iText book: http://itext.ugent.be/itext-in-action/
[iText-questions] bouncy castle
paul, I think you misunderstand the JCE system or what I am stating - although I did not use the term provider correctly in the strictest sense. The SUN provider in 1.5 includes significantly more cryptography algorithms than the 1.4 and prior releases - most importantly it includes an RSA public/private key implementation. One point you make that is almost correct, is that it does make it easier to easier to port to C#, but it is not a direct compile anyway, so I am not sure why the Java version wouldn't use JCE. Even so, supporting both easily only requires an additional layer of indirection, just create a PdfCryptography interface. There can be a implementation that uses JCE, and an implementation that uses bouncy castle directly. The C# version would probably only port over the 'bouncy castle' version. Maybe if you can explain why using bouncy castle directly is a good solution I could understand this, and why the extra layer of indirection is not a valid solution. Thanks, Robert - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT business topics through brief surveys-and earn cash http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV ___ iText-questions mailing list iText-questions@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/itext-questions Buy the iText book: http://itext.ugent.be/itext-in-action/
Re: [iText-questions] bouncy castle
On Fri, 2007-03-02 at 11:21 -0600, robert engels wrote: I think you misunderstand the JCE system or what I am stating - although I did not use the term provider correctly in the strictest sense. Might I suggest that code speaks louder than words and is more often understood correctly. As an uninvolved outsider, I think your suggestion is good if done correctly. How long would it take to implement? Maybe your time would be better spent coding than talking at cross purposes. -- Stuart Jansen [EMAIL PROTECTED] Guru Labs, L.C. signature.asc Description: This is a digitally signed message part - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT business topics through brief surveys-and earn cash http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV___ iText-questions mailing list iText-questions@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/itext-questions Buy the iText book: http://itext.ugent.be/itext-in-action/
Re: [iText-questions] bouncy castle
What is the point in wasting my time fixing the code, if there is no reasonable chance of getting it committed? Paulo is obviously competent enough to understand the problem, and the proposed solution. I have a feeling that there is more too this than meets the eye, as there is no technical reason for the accessing the bouncy castle jars directly. Robert - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT business topics through brief surveys-and earn cash http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV ___ iText-questions mailing list iText-questions@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/itext-questions Buy the iText book: http://itext.ugent.be/itext-in-action/
Re: [iText-questions] bouncy castle
Unfortunately iText needs more than algorithms and RSA public/private key implementation, most of those already present in jdk 1.4. There's also PKCS#7 assembly and disassembly and other asn1 operations that the jce doesn't give you. Even if jdk 1.5 could provide all that, iText won't leave jdk 1.4 in the near future. By the way, the jce is still used for the algorithms and signature, BouncyCastle is/will be used for high level asn1 manipulation and a few other things. I fail to see why you are so desperate to kill BouncyCastle and add layers of indirection and multiple implementations, I have enough work as it is. Maybe I'm missing the point here. If that's the case please prepare your code implementation so that this can be discussed grounded on something tangible. Paulo -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of robert engels Sent: Friday, March 02, 2007 5:21 PM To: itext iText here Subject: [iText-questions] bouncy castle paul, I think you misunderstand the JCE system or what I am stating - although I did not use the term provider correctly in the strictest sense. The SUN provider in 1.5 includes significantly more cryptography algorithms than the 1.4 and prior releases - most importantly it includes an RSA public/private key implementation. One point you make that is almost correct, is that it does make it easier to easier to port to C#, but it is not a direct compile anyway, so I am not sure why the Java version wouldn't use JCE. Even so, supporting both easily only requires an additional layer of indirection, just create a PdfCryptography interface. There can be a implementation that uses JCE, and an implementation that uses bouncy castle directly. The C# version would probably only port over the 'bouncy castle' version. Maybe if you can explain why using bouncy castle directly is a good solution I could understand this, and why the extra layer of indirection is not a valid solution. Thanks, Robert -- --- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT business topics through brief surveys-and earn cash http://www.techsay.com/default.php?page=join.phpp=sourceforge CID=DEVDEV ___ iText-questions mailing list iText-questions@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/itext-questions Buy the iText book: http://itext.ugent.be/itext-in-action/ Aviso Legal: Esta mensagem é destinada exclusivamente ao destinatário. Pode conter informação confidencial ou legalmente protegida. A incorrecta transmissão desta mensagem não significa a perca de confidencialidade. Se esta mensagem for recebida por engano, por favor envie-a de volta para o remetente e apague-a do seu sistema de imediato. É proibido a qualquer pessoa que não o destinatário de usar, revelar ou distribuir qualquer parte desta mensagem. Disclaimer: This message is destined exclusively to the intended receiver. It may contain confidential or legally protected information. The incorrect transmission of this message does not mean the loss of its confidentiality. If this message is received by mistake, please send it back to the sender and delete it from your system immediately. It is forbidden to any person who is not the intended receiver to use, distribute or copy any part of this message. - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT business topics through brief surveys-and earn cash http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV___ iText-questions mailing list iText-questions@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/itext-questions Buy the iText book: http://itext.ugent.be/itext-in-action/
Re: [iText-questions] bouncy castle (Paulo Soares)
Paulo, Maybe there is a better way. I have 2 motivating factors: 1. Limit the deployment size. The bouncy castle jars are as large as the iText jar. Maybe a 'thin BC can be distributed with iText that only contains the ASN functions? Or just implement the ASN1 functions in iText? 2. Limit the outside dependencies. Since iText uses the BC api directly, there might be compatibility problems in the future if the BC api changes, yet other systems need the latest BC api. I am trying to avoid Windows 'DLL Hell'. If the JCE does not cover needed complex operations that are required, then I can see the need for using BC directly. But it seems that most of these are fairly simple utility methods (if I understand it correctly). Maybe if you were more specific about what is needed in BC that is not available in JCE, I can work on writing that code. Robert - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT business topics through brief surveys-and earn cash http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV ___ iText-questions mailing list iText-questions@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/itext-questions Buy the iText book: http://itext.ugent.be/itext-in-action/
Re: [iText-questions] bouncy castle (Paulo Soares)
I'll get back to you later on this. Paulo - Original Message - From: robert engels [EMAIL PROTECTED] To: itext iText here itext-questions@lists.sourceforge.net Sent: Friday, March 02, 2007 6:26 PM Subject: Re: [iText-questions] bouncy castle (Paulo Soares) Paulo, Maybe there is a better way. I have 2 motivating factors: 1. Limit the deployment size. The bouncy castle jars are as large as the iText jar. Maybe a 'thin BC can be distributed with iText that only contains the ASN functions? Or just implement the ASN1 functions in iText? 2. Limit the outside dependencies. Since iText uses the BC api directly, there might be compatibility problems in the future if the BC api changes, yet other systems need the latest BC api. I am trying to avoid Windows 'DLL Hell'. If the JCE does not cover needed complex operations that are required, then I can see the need for using BC directly. But it seems that most of these are fairly simple utility methods (if I understand it correctly). Maybe if you were more specific about what is needed in BC that is not available in JCE, I can work on writing that code. Robert - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT business topics through brief surveys-and earn cash http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV ___ iText-questions mailing list iText-questions@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/itext-questions Buy the iText book: http://itext.ugent.be/itext-in-action/
[iText-questions] bouncy castle requirement?
Curious. Why is there a direct dependency on the bouncy castle jars? Can't iText use the standard Java encryption packages (which will locate the needed provider)? Thanks, Robert Engels - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT business topics through brief surveys-and earn cash http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV ___ iText-questions mailing list iText-questions@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/itext-questions Buy the iText book: http://itext.ugent.be/itext-in-action/
Re: [iText-questions] bouncy castle provider?
As a follow-up, the bouncy castle jars are very large 1.2 mb, yet seem to only be needed if doing public key encryption, and should not be required for basic old style pdf encryption, yet they are required in order to create ANY encrypted pdf. If the Java encryption services were used, at least the 1.2 mb download could be avoided, as jdk 1.5+ includes an impl of most common JCE providers. Would it be possible to hide the encryption behind interfaces so that if the bouncy castle jars were not available you could still create basic encrypted PDFs. ? I will work on a patch to do this as long as there is some reasonable expectation that it will be accepted. Thanks, Robert Engels - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT business topics through brief surveys-and earn cash http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV ___ iText-questions mailing list iText-questions@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/itext-questions Buy the iText book: http://itext.ugent.be/itext-in-action/
