harmony-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Leo Li" <liyilei1...@gmail.com>
Subject Re: [classlib][security]How to treat with bugs related with BouncyCastle?
Date Thu, 14 Dec 2006 09:16:49 GMT
 Oh... it seems a duplication.
 But thank you Stepan and I will ask Bouncy Castle direclty.


On 12/14/06, Stepan Mishura <stepan.mishura@gmail.com> wrote:
>
> Hi Leo,
>
> On 12/14/06, Leo Li wrote:
>
> > Hi, all:
> >
> > During fixing a bug, I found that on RI the algorithmParameterGenerator
> > for
> > DSA will throw InvalidParameterException while the input size of
> init(int
> > size) is not a multiple of 64 or the size is less than 512 or greater
> > than 1024. But Harmony seems does not make such a check. After I digging
> > into it, I found it is due to the
> JDKAlgorithmParameterGenerator$DSA.class
> > which resides in the range of signed.bcprov.jar.
>
>
> It looks like we already have this in JIRA:
> http://issues.apache.org/jira/browse/HARMONY-629
>
>
>
> > Can we regard it as a bug of BouncyCastle? If so, we may raise a jira to
> > BouncyCastle or another channel to communicate with them?
>
>
> I think it is OK to ask them dirrectly. We have experience resolving
> issues
> connected with BoncyCastle provider:
> http://issues.apache.org/jira/browse/HARMONY-2125
>
> Thanks,
> Stepan Mishura
> Intel Enterprise Solutions Software Division
>
>


-- 
Leo Li
China Software Development Lab, IBM

Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message