Just to confirm what you said: I tested with JDK4, JDK5, and JDK6. JDK4 did *not* have the RC4 framework and FOP gave an error message to that effect. JDK5 and JDK6 did have the RC4 framework. So those who use JDK4 will still need bouncy castle.
Thanks for your help! Kind Regards, Jonathan > -----Original Message----- > From: J.Pietschmann [mailto:[email protected]] > Sent: Saturday, May 05, 2012 3:46 AM > To: [email protected] > Subject: Re: RC4 and JDK 1.6 > > Am 04.05.2012 21:24, schrieb Jonathan Levinson: > > I find that I don't have to set up Bouncy Castle to get "-u password" > > encryption to prompt for a password. Can anyone else confirm, that > > with JDK 1.6, Bouncy Castle is not needed, or does FOP apply a very > > weak encryption unless Bouncy Castle or some other RC4 provider is > > used? > > The Bouncy Castle Library was mandatory with JDK 1.3, which had only a very > rudimentary crypto implementation. IIRC Java 1.4 already had a > RC4 implementation. I don't think Bouncy Castle is still necessary for > standard > PDF encryption tasks. > > J.Pietschmann > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [email protected] > For additional commands, e-mail: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
