Yes yes you're right.  Let's just avoid using BC code.

On 3/23/07, David Jencks <> wrote:
I think enrique's latest idea of simply avoiding bouncycastle entirely is by far the best idea.

If you don't want to do that copying the geornimo code is fine

svn cp ??????

david jencks


On Mar 23, 2007, at 11:57 AM, Alex Karasulu wrote:

Can we just create a Directory equivalent of this same jar ... like add it as a module so we do not have to depend on a Geronimo release cycle for this?
Let's just fork the project that Rick created and call it the shared-bc thingy or something.  It can have the IDEA files stripped out of it.

On 3/22/07, David Jencks (JIRA) < > wrote:

    [ ]

David Jencks updated DIRSERVER-877:

   Attachment: DIRSERVER-877-2.patch

Rick added the necessary classes to geronimo-util, and I deployed a snapshot to the apache snapshot repo.

The attached patch makes apacheds build without bouncy-castle jars and all the integration tests pass.  The only drawback I can see is that it uses a snapshot version.

I can see 2 choices here:
- I could try to get the changes into geronimo 1.2 which may get released soon (we are waiting only for a couple other releases)
- At the end of the month we are expecting to push geronimo 2.0-M4

> BouncyCastle IP issues with IDEA algo included in jars
> ------------------------------------------------------
>                 Key: DIRSERVER-877
>                 URL:
>             Project: Directory ApacheDS
>          Issue Type: Bug
>    Affects Versions: 1.0.1, 1.5.0
>            Reporter: Emmanuel Lecharny
>            Priority: Blocker
>             Fix For: 1.0.2, 1.5.0
>         Attachments: DIRSERVER-877-2.patch, DIRSERVER-877-broken-1.patch
> The BouncyCastle jars contains some classes which implement the IDEA algorithm, abusivly patented by a company, which thinks that patenting algorithm is a good way to make money.
> We should get these classes out of the jar, or use the Geronimo jar instead

This message is automatically generated by JIRA.
You can reply to this email to add a comment to the issue online.