Okay , so a little more research has led me to a recent update. As it turns out bouncycastle has removed the IDEA patented algorithm goinng forward, from version 1.40. This was done in 2008 Q3 by the seem of things.
See http://www.bouncycastle.org/latest_releases.html This I came across from .. http://marc.info/?l=webservices-general&m=121603291408315&w=2 So, now, it is OK to include as it no longer contains the IDEA IP. Back in 2005, this was the original thread alerting Apache community to the issue. http://mail-archives.apache.org/mod_mbox/www-legal-discuss/200508.mbox/%3c1ab1c8bd-b886-43c3-8d54-47b558b6d...@apache.org%3e Apache Synapse will be releasing with this new version now (because of the removal of IDEA). http://markmail.org/search/?q=apache%20bouncycastle%20idea#query:apache%20bouncycastle%20idea%20order%3Adate-backward+page:3+mid:mgwr5lafyasgq7oj+state:results On Sat, Jan 24, 2009 at 00:20, Ramon Buckland <ramon.buckl...@gmail.com>wrote: > On Sat, Jan 24, 2009 at 00:05, Claus Ibsen <claus.ib...@gmail.com> wrote: > >> Cool >> >> Which license does the BouncyCastle use? We cant accept all license at >> Apache >> http://www.apache.org/legal/3party.html > > > > It is the bouncy castle license .. > > http://www.bouncycastle.org/licence.html > > It seems to be used in other Apache Projects .. such as - > > WSS4J - > http://ws.apache.org/wss4j/apidocs/org/apache/ws/security/components/crypto/BouncyCastle.html > > However, a big however, it does seem to have issue .. > > > https://issues.apache.org/jira/browse/DIRSERVER-877?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel > > > hrmm .. looks like it needs to be a "pluggable" implementation. .. > > will think on it tomorrow. > >