If the regular bouncycastle jar is included as well there will be
classloader race - if the unbundled bouncycastle gets on the classloader
first you will be fine; might be something different with the sort/load
order on windows?
You can "install" in in the jre/lib directory (similar to how the jai
native stuff installs, but under security) - but that's probably not a good
solution.
If the UI LDAP module is getting packaged then either maven-shade or
maven-dependency plugin can be used to strip/extract the classes. Just add
the bouncycastle jar as a non-packaged file.
Alternatively if it can be ensured that it loads on the classpath before
the apacheds-all then it will "just work".
I'd be happy to take a look at it tomorrow if it's not already fixed :)
Chris
On Fri, Mar 20, 2015 at 8:04 PM, Andrea Aime <[email protected]>
wrote:
> On Sat, Mar 21, 2015 at 12:58 AM, Chris Bennight <[email protected]>
> wrote:
>
>> Oracle won't let you load security providers in their JDK/JRE unless the
>> jar is signed (with a trust chain configured for the JVM session). OpenJDK
>> doesn't restrict this.
>>
>>
> Ok, we'll look into it but... why isn't the same happening on my windows
> box, with Oracle JDK 7 and Oracle JDK 8?
> Is the windows JDK subject to different rules than a Linux one?
>
> Anyways, I can confirm apacheds-all does contain a repackaging of
> bouncycastle providers, from my local repo, looking
> in the jar with 7z, it's there:
>
>
> C:\Users\aaime\.m2\repository\org\apache\directory\server\apacheds-all\1.5.5\apacheds-all-1.5.5.jar\org\bouncycastle\
>
> By the name it sort of seems there is also a non "all" version available,
> I'll see if we can depend on smaller jars which
> hopefully do not repackage bouncycastle
>
> Cheers
> Andrea
>
> --
> ==
> GeoServer Professional Services from the experts! Visit
> http://goo.gl/NWWaa2 for more information.
> ==
>
> Ing. Andrea Aime
> @geowolf
> Technical Lead
>
> GeoSolutions S.A.S.
> Via Poggio alle Viti 1187
> 55054 Massarosa (LU)
> Italy
> phone: +39 0584 962313
> fax: +39 0584 1660272
> mob: +39 339 8844549
>
> http://www.geo-solutions.it
> http://twitter.com/geosolutions_it
>
> *AVVERTENZE AI SENSI DEL D.Lgs. 196/2003*
>
> Le informazioni contenute in questo messaggio di posta elettronica e/o
> nel/i file/s allegato/i sono da considerarsi strettamente riservate. Il
> loro utilizzo è consentito esclusivamente al destinatario del messaggio,
> per le finalità indicate nel messaggio stesso. Qualora riceviate questo
> messaggio senza esserne il destinatario, Vi preghiamo cortesemente di
> darcene notizia via e-mail e di procedere alla distruzione del messaggio
> stesso, cancellandolo dal Vostro sistema. Conservare il messaggio stesso,
> divulgarlo anche in parte, distribuirlo ad altri soggetti, copiarlo, od
> utilizzarlo per finalità diverse, costituisce comportamento contrario ai
> principi dettati dal D.Lgs. 196/2003.
>
>
>
> The information in this message and/or attachments, is intended solely for
> the attention and use of the named addressee(s) and may be confidential or
> proprietary in nature or covered by the provisions of privacy act
> (Legislative Decree June, 30 2003, no.196 - Italy's New Data Protection
> Code).Any use not in accord with its purpose, any disclosure, reproduction,
> copying, distribution, or either dissemination, either whole or partial, is
> strictly forbidden except previous formal approval of the named
> addressee(s). If you are not the intended recipient, please contact
> immediately the sender by telephone, fax or e-mail and delete the
> information in this message that has been received in error. The sender
> does not give any warranty or accept liability as the content, accuracy or
> completeness of sent messages and accepts no responsibility for changes
> made after they were sent or for other risks which arise as a result of
> e-mail transmission, viruses, etc.
>
> -------------------------------------------------------
>
------------------------------------------------------------------------------
Dive into the World of Parallel Programming The Go Parallel Website, sponsored
by Intel and developed in partnership with Slashdot Media, is your hub for all
things parallel software development, from weekly thought leadership blogs to
news, videos, case studies, tutorials and more. Take a look and join the
conversation now. http://goparallel.sourceforge.net/
_______________________________________________
Geoserver-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/geoserver-devel
