getContent call in

envelopedData = recipientInfo.getContent(certificateKey,
certificateKeyProvider);

Should be:

getContent(new
JceKeyTransEnvelopedRecipient(certificateKey).setProvider(certificateKeyProvider));

I'd also suggest allowing people to specify a content provider, the original
BC approach was to try to fall back to the default provider if the
certificateKeyProvider did not provide an appropriate algorithm. Apart from
the fact this made it impossible to make the code compliant for audit
purposes, it also sometimes caused unexpected results, so there is also a
setContentProvider() method available now.

Regards,

David

--
View this message in context: 
http://itext-general.2136553.n4.nabble.com/iText-5-2-1-and-Bouncycastle-1-47-tp4544704p4561078.html
Sent from the iText - General mailing list archive at Nabble.com.

------------------------------------------------------------------------------
For Developers, A Lot Can Happen In A Second.
Boundary is the first to Know...and Tell You.
Monitor Your Applications in Ultra-Fine Resolution. Try it FREE!
http://p.sf.net/sfu/Boundary-d2dvs2
_______________________________________________
iText-questions mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/itext-questions

iText(R) is a registered trademark of 1T3XT BVBA.
Many questions posted to this list can (and will) be answered with a reference 
to the iText book: http://www.itextpdf.com/book/
Please check the keywords list before you ask for examples: 
http://itextpdf.com/themes/keywords.php

Reply via email to