Mailing-List: contact general-help@incubator.apache.org; run by ezmlm
Precedence: bulk
Reply-To: general@incubator.apache.org
Received-SPF: pass (athena.apache.org: domain of for.svkrish@gmail.com
 designates 64.233.182.187 as permitted sender)
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=beta;
        h=received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:references;
        b=fRRytkvrafaDUEFB8y0d0cb+ny9YdARFKZPpklBQdLm9Cv8EAJuI38f0tJ+n4lgghjJCRLvN2ip5z6jl6l/ZtPx277SS23flesvh8XDPxHBL68VUui/HzGZ8ICSDkLpZ6Z8TLPhq51QbWAcaqdV1DxJknUmosnN+1CU/ZqHWp10=
Message-ID: <33e260400709152223x4f65aa7ei4005b39ce67ecdee@mail.gmail.com>
Date: Sun, 16 Sep 2007 10:53:14 +0530
From: "Venkata Krishnan" <for.svkrish@gmail.com>
To: general@incubator.apache.org
Subject: Re: Export Notification - Using BouncyCastle in Tuscany Rel 1.0
In-Reply-To: <46EC951D.3020901@gmail.com>
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="----=_Part_10345_15161358.1189920194624"
References: <33e260400709141226l6c7f5539p6ab3199c15d6045b@mail.gmail.com>
	 <698AF826-4064-4B8B-9D6E-B1BE947B6D46@gmail.com>
	 <71e1b5740709150259r2efc6166gc86832a02c4e6a10@mail.gmail.com>
	 <91EF7315-E4CA-4565-A157-ABA70711DAF6@gmail.com>
	 <46EC8EFF.3030201@rowe-clan.net> <46EC9152.3000605@gmail.com>
	 <46EC9323.2030602@rowe-clan.net> <46EC951D.3020901@gmail.com>

------=_Part_10345_15161358.1189920194624
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

As far as Tuscany is concerned our dependency on BouncyCastle comes thro our
use of Rampart 1.3.  I just checked up the Rampart distros and it does have
the bouncy castle jar packed in it - releases and snapshots (eg.
http://people.apache.org/dist/rampart/nightly/rampart-SNAPSHOT.zip).  Though
this is an indirect dependency I know its impending on Tuscany to
individually address legal implications.  If there is something that Rampart
has followed for this, then I'd like to know that to follow in Tuscany as
well.

Thanks

- Venkat

On 9/16/07, James M Snell <jasnell@gmail.com> wrote:
>
> I'll say "Generally Soft".  There are a couple of classes that require
> bouncy to compile, but their use is entirely optional.  Two of the
> classes are example code that is only shipped in source form -- we test
> compile the examples before shipping them.  The other classes are
> optional utility classes that are shipped as part of the optional
> security module.  Other crypto providers can be used as an alternative
> and it would literally only take a couple of minutes to remove the
> compile-time dependency.
>
> - James
>
> William A. Rowe, Jr. wrote:
> > James M Snell wrote:
> >> Well, as far as Abdera is concerned, there'd be absolutely no problem
> >> with not shipping the jar.  We can easily document how to go off and
> get
> >> the jar and the functions we're using it for can be provided by other
> >> crypto providers.  If the board does not want us shipping it, just let
> >> us know and I'll pull it out.
> >
> > Out of curiosity, is it a hard or soft dependency?
> >
> > And I'm still curious to know if bouncycastle has an unencumbered
> alternate
> > download without IDEA.
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: general-unsubscribe@incubator.apache.org
> > For additional commands, e-mail: general-help@incubator.apache.org
> >
> >
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: general-unsubscribe@incubator.apache.org
> For additional commands, e-mail: general-help@incubator.apache.org
>
>

------=_Part_10345_15161358.1189920194624--