[ https://issues.apache.org/jira/browse/IVY-1553?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15744016#comment-15744016 ]
Reşat SABIQ commented on IVY-1553: ---------------------------------- FYI: I'm using ivy 2.4.0, & i've got the same results using bouncy castle 1.49 and 1.50 (1.51+ isn't compatible w/ ivy 2.4.0). Apparently, the root cause appears to be in classloading: a parent classloader ends up being used, which isn't aware of the classes available in a child classloader. P.S. I believe the issue is also present in trunk since no commits since 2.4.0 appear to contain a potential fix for this issue. > PGP signing during publication shouldn't require bouncy castle dependencies > to be in .ant/lib or forking another java process with classpath explicitly > configured to contain bouncy castle modules > --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- > > Key: IVY-1553 > URL: https://issues.apache.org/jira/browse/IVY-1553 > Project: Ivy > Issue Type: Bug > Components: Core > Affects Versions: 2.4.0 > Reporter: Reşat SABIQ > Labels: pgp > > With > <signers> > <pgp name="default-sig" keyId="${pgp.key}" > password="${pgp.password}"/> > </signers> > in ivysettings.xml, > ivy kept throwing CNFE until i put these dependencies in .ant/lib: > <dependency org="org.bouncycastle" name="bcpg-jdk15on" > rev="1.49" conf="default"/> > <dependency org="org.bouncycastle" name="bcprov-jdk15on" > rev="1.49" conf="default"/> > I ended up putting the following comment in ivy.xml: > <!-- First 2 currently must be in .ant/lib (pgp signer didn't > work via dependency or ivycache manipulation, etc). --> > P.S. I believe this issue is ongoing since 2012/13. -- This message was sent by Atlassian JIRA (v6.3.4#6332)