The reason we haven't included to this point is that we don't compile against it. It is required only at runtime and then only indirectly via the standard Java security stuff.
- James Garrett Rooney wrote: > On 10/23/06, James M Snell <[EMAIL PROTECTED]> wrote: >> Yeah, this has been an outstanding to do on my list for a while. We >> should add BC to the Ant build dependency download when the build >> security option is enabled and add it to the Maven build. The one >> question is whether we can actually ship it in the zip, but that's >> something we can work out when we're ready to ship 0.2.0 > > I believe there are other ASF projects that ship at least parts of > BouncyCastle (not all of it due to some patent issues), but if we do > ship it we're going to need to jump through some crypto export hoops. > Actually, we probably have to jump through them even if we don't ship > it, so it's not like we're avoiding the pain by not bundling it... > > -garrett >
