> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On
> Behalf Of robert engels
> Sent: Friday, March 02, 2007 4:12 PM
> To: itext iText here
> Subject: Re: [iText-questions] bouncy castle requirement?
>
> My point was, if you use the standard Java interfaces, a user
> that is
> running Java 1.3 or 1.4 can install the bouncy castle
> "provider" jars
> and it will work.
>
The jars must be there but BouncyCastle need not be a provider.
> A user that is running 1.5 does not need the bouncy castle
> jars since
> the provider is already there.
>
In all the jdk after 1.4 there's only one provider installed called
"SUN". You can install other providers like BouncyCastle, called "BC".
Having 1.5 doesn't give you any extra provider out of the sky. Either
that or I don't understand the meaning of provider here.
> With the current code, all users must install the bouncy
> castle jars,
> including the 1.5 users.
>
See above. Note that the BouncyCastle jars do a lot more than just
complement the existing algorithms.
> I am willing to work on a patch to allow have iText use the standard
> java JCE interfaces if there was reasonable certainty of it being
> accepted.
>
Don't bother. I struggled a lot before deciding for the extra jars (I
too like small single jars) but signatures and security are not getting
any easier and it's difficult to justify the extra iText complexity when
BouncyCastle has most that is needed. Furthermore, using BouncyCastle
also makes it easier to do the porting to C#.
Paulo
Aviso Legal:
Esta mensagem é destinada exclusivamente ao destinatário. Pode conter
informação confidencial ou legalmente protegida. A incorrecta transmissão desta
mensagem não significa a perca de confidencialidade. Se esta mensagem for
recebida por engano, por favor envie-a de volta para o remetente e apague-a do
seu sistema de imediato. É proibido a qualquer pessoa que não o destinatário de
usar, revelar ou distribuir qualquer parte desta mensagem.
Disclaimer:
This message is destined exclusively to the intended receiver. It may contain
confidential or legally protected information. The incorrect transmission of
this message does not mean the loss of its confidentiality. If this message is
received by mistake, please send it back to the sender and delete it from your
system immediately. It is forbidden to any person who is not the intended
receiver to use, distribute or copy any part of this message.
-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys-and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
iText-questions mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/itext-questions
Buy the iText book: http://itext.ugent.be/itext-in-action/
