[
https://issues.apache.org/jira/browse/NUTCH-621?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12603884#action_12603884
]
Chris A. Mattmann commented on NUTCH-621:
-----------------------------------------
Hi Grant:
Thanks for the poke on this. I was speaking with Jukka Zitting about this. Tika
requires the crypto declaration because of its transitive Maven dependencies in
its Parsing framework on the Bountycastle libraries. Nutch, on the other hand,
is using Tika at this point for mime detection only, and Nutch achieves its
usage of Tika (0.1-incubating) by CM'ing only the Apache Tika 0.1 jar, and not
making use of any of its transitive dependencies (which are inherently Parsing
specific, and not Mime Detection specific). In addition, there was a similar
thread discussed here:
http://markmail.org/message/u7sjfzt7naknsv34
where the consensus was you don't need crypto notifications if you don't
include any crypto libraries or use the related functionality in an included
other library that has an optional dependency on a crypto library. So, I think
that Nutch falls within that category. Would you agree?
Thanks for your help and guidance.
Cheers,
Chris
> Nutch needs to declare it's crypto usage
> ----------------------------------------
>
> Key: NUTCH-621
> URL: https://issues.apache.org/jira/browse/NUTCH-621
> Project: Nutch
> Issue Type: Task
> Reporter: Grant Ingersoll
> Assignee: Chris A. Mattmann
> Priority: Blocker
>
> Per the ASF board direction outlined at
> http://www.apache.org/dev/crypto.html, Nutch needs to declare it's use of
> crypto libraries (i.e. BouncyCastle, via PDFBox/Tika).
> See TIKA-118.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
