In the ant build, we can download different versions of bouncycastle into
different directories. The openpgp task can use the old bouncycastle jar and
the dsig can use the new one. Bouncycastle has lots of security fixes and it
seems bad to completely switch back to a very old version.
These were modified to be the same old version.
<property name="dsig.bouncycastle-prov.jar"
location="${compile.lib}/bcprov-ext-jdk15on-1.51.jar"/>
<property name="dist.bouncycastle-prov.jar"
location="${compile.lib}/bcprov-ext-jdk15on-1.51.jar"/>
But wouldn't this work (if we have a dist.lib as well as a compile.lib)?
<property name="dsig.bouncycastle-prov.jar"
location="${compile.lib}/bcprov-ext-jdk15on-1.61.jar"/>
<property name="dist.bouncycastle-prov.jar"
location="${dist.lib}/bcprov-ext-jdk15on-1.51.jar"/>
--
Sent from: http://apache-poi.1045710.n5.nabble.com/POI-Dev-f2312866.html
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@poi.apache.org
For additional commands, e-mail: dev-h...@poi.apache.org
