Mailing-List: contact users-help@directory.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@directory.apache.org
Received-SPF: pass (athena.apache.org: domain of elecharny@gmail.com
 designates 74.125.82.178 as permitted sender)
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=gamma;
        h=message-id:date:from:reply-to:user-agent:mime-version:to:subject
         :references:in-reply-to:content-type:content-transfer-encoding;
        b=fPWSnU2+ABONlf5mT2LOo2f9HqeXPdN9QY7ql5BEf+GEAj48wriCakWSyWAUpM1PYH
         0BFKDboVmlvXnYgwxTL/af8flsOFDXT8pISq6L9KyvH/ARtG2d4/Pq3371BYfTSc7XEV
         jT4JsubK9SMHpjlFu3+rKDk1iWfzKKZo2fLJ8=
Message-ID: <4C19C31E.4030502@gmail.com>
Date: Thu, 17 Jun 2010 08:39:26 +0200
From: Emmanuel Lecharny <elecharny@gmail.com>
Reply-To: elecharny@apache.org
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.6; en-US;
 rv:1.9.1.9) Gecko/20100317 Thunderbird/3.0.4
MIME-Version: 1.0
To: users@directory.apache.org
Subject: Re: Upgrading to Apache 1.5.7
References: <AANLkTilge0sOTk3xoD7ULICLAswjTtQVIs3vKlzQTZml@mail.gmail.com>
In-Reply-To: <AANLkTilge0sOTk3xoD7ULICLAswjTtQVIs3vKlzQTZml@mail.gmail.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 8bit

On 6/16/10 11:09 AM, Sudheer Kumar wrote:
> Hi
>
> We are upgrading to Apache 1.5.7 from Apache 1.5.4.  We have some approval
> issues for certain packages they are:
> 1. bouncy castle : bcprov-jdk15-140.jar
>
>                 Is it okay to use bouncy castle 1.34 instead of 140?  We have
> approval for bcprov-jdk15-134 but not for bcprov-jdk15-140.jar.
>    
AFAICR, there is a issue with 1.34 version with some patented encryption 
algorithm, so we switched to 140. I think you can safely use 1.34,/
>                I replaced it with bcprov-jdk15-134 and changed the code
> (javax.security.auth.x500.X500Principal.TlsKeyGenerator.java) :-
>                     certGen.generate( privateKey, "BC" )
> to certGen.generateX509Certificate( privateKey, "BC" );
>               Hope this is ok?  Could you please let me know how to test
> this? I mean a test case to test this feature?
>    

I have no idea. Here, you are on your own.
>
> 2. Jetty: jetty-6.1.14.jar and jetty-util-6.1.14.jar.
>           I just removed these jars and commented the
> org.apache.directory.server.Service.initHttpServer() and removed the
> server.integration package.  I hope this will not impact Apache DS as any
> way Jetty server is not invoked by default and we have no plan to configure
> http setting in server.xml.
>    
That's OK. You don't have yo use Jetty if you don't need to, and we are 
not doing anything special with Jetty atm. It was just addedfor future 
usage.


-- 
Regards,
Cordialement,
Emmanuel L�charny
www.nextury.com