Return-Path: Delivered-To: apmail-harmony-dev-archive@www.apache.org Received: (qmail 73354 invoked from network); 18 Sep 2007 11:27:05 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.2) by minotaur.apache.org with SMTP; 18 Sep 2007 11:27:05 -0000 Received: (qmail 90482 invoked by uid 500); 18 Sep 2007 11:26:57 -0000 Delivered-To: apmail-harmony-dev-archive@harmony.apache.org Received: (qmail 89953 invoked by uid 500); 18 Sep 2007 11:26:56 -0000 Mailing-List: contact dev-help@harmony.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@harmony.apache.org Delivered-To: mailing list dev@harmony.apache.org Received: (qmail 89944 invoked by uid 99); 18 Sep 2007 11:26:56 -0000 Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 18 Sep 2007 04:26:56 -0700 X-ASF-Spam-Status: No, hits=-0.0 required=10.0 tests=SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (athena.apache.org: domain of t.p.ellison@gmail.com designates 66.249.92.174 as permitted sender) Received: from [66.249.92.174] (HELO ug-out-1314.google.com) (66.249.92.174) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 18 Sep 2007 11:26:54 +0000 Received: by ug-out-1314.google.com with SMTP id k40so73080ugc for ; Tue, 18 Sep 2007 04:26:32 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:user-agent:mime-version:to:subject:references:in-reply-to:x-enigmail-version:content-type:content-transfer-encoding; bh=BLHX42/W315GdcjwCr9AM8mgacu02U4fq1ZpMsj5l9Q=; b=npAgJGWc0k/yTc/W2fXEhuBxD7UmuElNbHsMnP5BxGodhWCvvCfvp3HEXBPEyONidkWpMFgYRArBPuZmzbRLiXi7RrcU84UJtEo/jbps3kFDX60KScSh372hixuMh72ffih5RGMfMF80lYBKWx2nwwedswqw6GyVPEeXZ1Xrhj0= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:message-id:date:from:user-agent:mime-version:to:subject:references:in-reply-to:x-enigmail-version:content-type:content-transfer-encoding; b=pUVH5bSLmmWoxO5G2j65ZOS/V1MGv0KnInTOwmIYrtH0RsOvQm67TrYmWy4lCgT+Ggwo+GoDQ53H0/Xq1uXT6znXNSdJrlAGnMtwB6TwgZcDA8TpeEZ9B8gfjI/lbFg1SfAmGk33nSP4H6R5ayimpmcHTpgC6HzB8TGhnYE5wqQ= Received: by 10.67.88.7 with SMTP id q7mr636370ugl.1190114792594; Tue, 18 Sep 2007 04:26:32 -0700 (PDT) Received: from ?9.20.183.161? ( [195.212.29.75]) by mx.google.com with ESMTPS id y6sm440515uge.2007.09.18.04.26.30 (version=SSLv3 cipher=RC4-MD5); Tue, 18 Sep 2007 04:26:31 -0700 (PDT) Message-ID: <46EFB5E3.60102@gmail.com> Date: Tue, 18 Sep 2007 12:26:27 +0100 From: Tim Ellison User-Agent: Thunderbird 2.0.0.6 (Windows/20070728) MIME-Version: 1.0 To: dev@harmony.apache.org Subject: Re: [classlib] Redistributing bouncy castle providers References: <46EFA342.7050801@gmail.com> <906dd82e0709180410w7afd842fpf1e5adc5e8ce7c3e@mail.gmail.com> In-Reply-To: <906dd82e0709180410w7afd842fpf1e5adc5e8ce7c3e@mail.gmail.com> X-Enigmail-Version: 0.95.3 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-Virus-Checked: Checked by ClamAV on apache.org Mikhail Loenko wrote: > 2007/9/18, Tim Ellison : >> There is a discussion over at the incubator general mailing list (e.g. >> [1]), amongst other places, about the redistribution of BouncyCastle >> code from ASF machines. >> >> The crux is that we can't redistribute BC's IDEA implementation as it is >> subject to a known patent for which we don't have a grant/license. >> >> We'll have to change our current practice of publishing binaries that >> include BC unmodified. The resolution seems to be maintaining a local >> copy of the BC JAR without the offending algorithm. I expect we would >> have to unsign the JAR too when modified. >> >> Do we have any dependencies upon IDEA? I see some references in the >> JSSE cipher suite code, > > Reference to IDEA? just grepping: modules/x-net/src/main/java/org/apache/harmony/xnet/provider/jsse/CipherSuite.java 107: static byte[] code_TLS_RSA_WITH_IDEA_CBC_SHA = { 0x00, 0x07 }; 157: static CipherSuite TLS_RSA_WITH_IDEA_CBC_SHA = new CipherSuite( 158: "TLS_RSA_WITH_IDEA_CBC_SHA", false, KeyExchange_RSA, "IDEA_CBC", 159: "SHA", code_TLS_RSA_WITH_IDEA_CBC_SHA); 256: TLS_RSA_WITH_IDEA_CBC_SHA, 417: } else if ("IDEA_CBC".equals(cipherName)) { 418: this.cipherName = "IDEA/CBC/NoPadding"; Regards, Tim