[ 
https://issues.apache.org/jira/browse/DIRSERVER-877?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

David Jencks updated DIRSERVER-877:
-----------------------------------

    Attachment: DIRSERVER-877-broken-1.patch

I took a look at substituting the geronimo-util jar.  We apparenly changed the 
package names, and not all the classes apacheds uses are in the current 
geronimo-util jar.

Missing are:
org.bouncycastle.crypto.digests.SHA1Digest
org.bouncycastle.crypto.modes.CBCBlockCipher
org.bouncycastle.crypto.params.ParametersWithIV
org.bouncycastle.crypto.engines.DESEngine
org.bouncycastle.crypto.engines.DESedeEngine
org.bouncycastle.crypto.digests.MD4Digest
org.bouncycastle.crypto.params.DESParameters
org.bouncycastle.crypto.digests.MD5Digest

I'll see if we (geronimo) can figure out if we can include these or if 
equivalents are available in the built-in crypto support.

> BouncyCastle IP issues with IDEA algo included in jars
> ------------------------------------------------------
>
>                 Key: DIRSERVER-877
>                 URL: https://issues.apache.org/jira/browse/DIRSERVER-877
>             Project: Directory ApacheDS
>          Issue Type: Bug
>    Affects Versions: 1.0.1, 1.5.0
>            Reporter: Emmanuel Lecharny
>            Priority: Blocker
>             Fix For: 1.0.2, 1.5.0
>
>         Attachments: DIRSERVER-877-broken-1.patch
>
>
> The BouncyCastle jars contains some classes which implement the IDEA 
> algorithm, abusivly patented by a company, which thinks that patenting 
> algorithm is a good way to make money.
> We should get these classes out of the jar, or use the Geronimo jar instead

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

Reply via email to