This issue has been created
There are 8 updates.
 
 
XWiki Commons / cid:jira-generated-image-avatar-71a23573-66a2-4928-bed7-91c6749aba1f XCOMMONS-3830 Closed

Upgrade to Bouncy Castle 1.86.2

 
View issue   ยท   Add comment
 

Issue created

 
cid:jira-generated-image-avatar-561dd4db-bf43-4013-a719-685951acaef3 Thomas Mortagne created this issue on 12/Oct/26 16:07
 
Summary: Upgrade to Bouncy Castle 1.88.2
Issue Type: cid:jira-generated-image-avatar-71a23573-66a2-4928-bed7-91c6749aba1f Task
Affects Versions: 18.8.0
Assignee: Unassigned
Components: Dependency Upgrades
Created: 12/Oct/26 16:07
Priority: cid:jira-generated-image-static-major-80636aa5-48bd-4fb2-b70b-9a50ec267e35 Major
Reporter: Thomas Mortagne
Description:

See:

 
 

8 updates

 
cid:jira-generated-image-avatar-561dd4db-bf43-4013-a719-685951acaef3 Changes by Thomas Mortagne on 12/Oct/26 16:10
 
Summary: Upgrade to Bouncy Castle 1. 88 86 .2
Fix Version: 18.9.0-rc-1
Documentation in Release Notes: N/A
Documentation: N/A
Description: See :
*
https:// www github . bouncycastle.org com / download bcgit / bouncy bc - castle- java/ ?filter=java%3Drelease- blob/ 1 .86.X/docs/releasenotes.md:

* Release 1.86.1 generated for bctls and bctls
- klog (Java 8 and later, standard and debug) to fix SSLContext.createSSLEngine() failing with NoSuchMethodError on every JDK from 9 up when the 1. 86 bctls jar was used: the jdk1.9 copy of the package - private SSLEngineUtil declared create(ContextData) with a different return type from the root copy that the root ProvSSLContextSpi was compiled against, a mismatch exposed by the -implicit:none added to the java9 compile in 1 .86. The jdk1.9 copy now declares the same return type. The other 1.86 jars are unchanged and the 1.86.1 BOM pins them at 1.86 (github # release-notes 2448).

* https://www Release 1 . bouncycastle 86 . org/download/bouncy 2 generated for bctls and bctls - castle-java/?filter=java%3Drelease- klog (Java 8 and later, standard and debug) because the 1 - . 86 .1 jars could not be resolved in an OSGi container: their Import - Package ranges for every org.bouncycastle package they use from bcprov and bcutil started at 1.86.1, the bundle's own version, but those bundles are only published at 1.86. The import floor is now the major.minor release, [1.86,1.87), and the 1.86.1 fix for SSLContext.createSSLEngine() is otherwise unchanged. The 1.86. 2 BOM pins the other jars at 1.86 (github # release-notes 2493).
Assignee: Thomas Mortagne
Resolution: Fixed
Status: Open Closed