On Aug 30, 2005, at 7:42 PM, David Jencks wrote:
On Aug 30, 2005, at 4:38 PM, Bruce Snyder wrote:
How about asking the Bouncy Castle people for some advice on what to
do? They're distributing the artifacts affected by these statements
from MediaCrypt, what do they recommend to their user base regarding
redistribution and use?
Good idea. Alternatively for our use, it looks like the directory
project has its own asn1 implementation. IIUC that is all we use
in the openejb corba code. Can we sidestep this problem by using
the directory's asn1 implementation?
If that works technically, it gets OpenEJB off the hook... The only
remaining thing for us will be the console, and if push comes to
shove, we just remove the functionality that uses it, I suppose. Or
leave it there and tell people that if they want to use it, go get BC
themselves. We can always make the portlet smart and detect BC
before becoming active, and otherwise just showing a screen w/ the
warning and where to get hte software.
geir
--
Geir Magnusson Jr +1-203-665-6437
[EMAIL PROTECTED]
