PJ Fanning created RANGER-5219:
----------------------------------

             Summary: switch to jdk18on bouncycastle jars
                 Key: RANGER-5219
                 URL: https://issues.apache.org/jira/browse/RANGER-5219
             Project: Ranger
          Issue Type: Task
          Components: kms
            Reporter: PJ Fanning


Bouncycastle no longer release jdk15on jars. Best to switch to the jdk18on ones.
This is a critical security library and the old jdk15on jars have multiple 
security bugs (CVEs).

* https://mvnrepository.com/artifact/org.bouncycastle/bcprov-jdk15on
* https://mvnrepository.com/artifact/org.bouncycastle/bcprov-jdk18on

The switchover is usually very easy. Same classes, just compiled with Java 8.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to