harmony-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Geir Magnusson Jr." <g...@pobox.com>
Subject Re: [classlib][security] Whether to update the signed.bcprov.jar?
Date Mon, 18 Dec 2006 14:55:52 GMT


Stepan Mishura wrote:
> On 12/18/06, Mark Hindess wrote:
>>
>>
>> On 18 December 2006 at 13:43, "Alexey Varlamov" wrote:
>> > Stepan,
>> >
>> > I thougth we agreed to drop "signed" prefix. See also comment in the
>> > depends.properties:
>> > --------------------
>> > # will the next person to update bcprov.jar please remove the "signed."
>> > # prefix from the bcprov.jar property
>> > bcprov.dir=${depends.jars}/bcprov-jdk15-134
>> > bcprov.jar=${bcprov.dir}/signed.bcprov.jar
>> > --------------------
>>
>> Indeed.  The 'signed.' prefix was left when I removed the 'unsigning'
>> step that we needed a while back.  I couldn't remove the prefix without
>> making unnecessary work for developers so I left it to be removed next
>> time developers had to fetch a new version.
> 
> 
> Mark, sorry about that. I forgot to remove the prefix in the last moment.
> 
> BTW, what do you mean by saying "I couldn't remove the prefix without 
> making
> unnecessary work for developers"?

And, is this something we can just decide to grit our teeth and do it so 
we don't have this same conversation in a month ? :)

geir


> 
> Thanks,
> Stepan.
> 
> -Mark.
>>
>> > 2006/12/18, Stepan Mishura <stepan.mishura@gmail.com>:
>> > > On 12/14/06, Leo Li wrote:
>> > > >
>> > > > Hi, all:
>> > > >     When fixing the bug of Harmony-2678, I found Harmony fails to
>> get the
>> > > > AlgorithmParameters for the algorithm "OAEP" because of the
>> > > > signed.bcprov.jar used lacks a class called "
>> > > > org.bouncycastle.jce.provider.JDKAlgorithmParameters$OAEP ". But it
>> exist
>> > s
>> > > > in the latest release version of Bouncy Castle and I replace the
>> current
>> > > > used jar with bcprov-jdk15-134.jar and everything is OK.
>> > > >     So shall we update the signed.bcprov.jar?  If it is, I will 
>> give
>> a
>> > > > patch to the renew the make/depends.properties.
>> > >
>> > >
>> > > Hi Leo,
>> > >
>> > > I've applied your patch for upgrading version of Bounce Castle
>> provider
>> > > (from HARMONY-2678).
>> > >
>> > > Thanks,
>> > > Stepan.
>> > >
>>
>>
>>
> 

Mime
View raw message