Hello community, here is the log from the commit of package bouncycastle for openSUSE:Factory checked in at 2020-05-01 11:08:11 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/bouncycastle (Old) and /work/SRC/openSUSE:Factory/.bouncycastle.new.2738 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "bouncycastle" Fri May 1 11:08:11 2020 rev:26 rq:798864 version:1.65 Changes: -------- --- /work/SRC/openSUSE:Factory/bouncycastle/bouncycastle.changes 2020-03-27 21:55:32.002731185 +0100 +++ /work/SRC/openSUSE:Factory/.bouncycastle.new.2738/bouncycastle.changes 2020-05-01 11:08:26.727207062 +0200 @@ -1,0 +2,42 @@ +Wed Apr 29 09:28:03 UTC 2020 - Pedro Monreal Gonzalez <pmonrealgonza...@suse.com> + +- Version update to 1.65 + * Defects Fixed: + - DLExternal would encode using DER encoding for tagged SETs. + - ChaCha20Poly1305 could fail for large (>~2GB) files. + - ChaCha20Poly1305 could fail for small updates when used via the provider. + - Properties.getPropertyValue could ignore system property when other + local overrides set. + - The entropy gathering thread was not running in daemon mode, meaning there + could be a delay in an application shutting down due to it. + - A recent change in Java 11 could cause an exception with the BC Provider's + implementation of PSS. + - BCJSSE: TrustManager now tolerates having no trusted certificates. + - BCJSSE: Choice of credentials and signing algorithm now respect the peer's + signature_algorithms extension properly. + - BCJSSE: KeyManager for KeyStoreBuilderParameters no longer leaks memory. + * Additional Features and Functionality: + - LMS and HSS (RFC 8554) support has been added to the low level library and + the PQC provider. + - SipHash128 support has been added to the low level library and the JCE provider. + - BCJSSE: BC API now supports explicitly specifying the session to resume. + - BCJSSE: Ed25519, Ed448 are now supported when TLS 1.2 or higher is + negotiated (except in FIPS mode). + - BCJSSE: Added support for extended_master_secret system properties: + jdk.tls.allowLegacyMasterSecret, jdk.tls.allowLegacyResumption, + jdk.tls.useExtendedMasterSecret . + - BCJSSE: Ed25519, Ed448 are now supported when TLS 1.2 or higher is + negotiated (except in FIPS mode). + - BCJSSE: KeyManager and TrustManager now check algorithm constraints for + keys and certificate chains. + - BCJSSE: KeyManager selection of server credentials now prefers matching + SNI hostname (if any). + - BCJSSE: KeyManager may now fallback to imperfect credentials (expired, + SNI mismatch). + - BCJSSE: Client-side OCSP stapling support (beta version: via status_request + extension only, provides jdk.tls.client.enableStatusRequestExtension, and + requires CertPathBuilder support). + - TLS: DSA in JcaTlsCrypto now falls back to stream signing to work around + NoneWithDSA limitations in default provider. + +------------------------------------------------------------------- Old: ---- bcmail-jdk15on-1.64.pom bcpg-jdk15on-1.64.pom bcpkix-jdk15on-1.64.pom bcprov-jdk15on-1.64.pom bctls-jdk15on-1.64.pom r1rv64.tar.gz New: ---- bcmail-jdk15on-1.65.pom bcpg-jdk15on-1.65.pom bcpkix-jdk15on-1.65.pom bcprov-jdk15on-1.65.pom bctls-jdk15on-1.65.pom r1rv65.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ bouncycastle.spec ++++++ --- /var/tmp/diff_new_pack.vSpHvm/_old 2020-05-01 11:08:31.075216518 +0200 +++ /var/tmp/diff_new_pack.vSpHvm/_new 2020-05-01 11:08:31.083216536 +0200 @@ -16,10 +16,10 @@ # -%global ver 1.64 -%global shortver 164 -%global gittag r1rv64 -%global archivever jdk15on-%{shortver}b07 +%global ver 1.65 +%global shortver 165 +%global gittag r1rv65 +%global archivever jdk15on-%{shortver} %global classname org.bouncycastle.jce.provider.BouncyCastleProvider Name: bouncycastle Version: %{ver} ++++++ bcmail-jdk15on-1.64.pom -> bcmail-jdk15on-1.65.pom ++++++ --- /work/SRC/openSUSE:Factory/bouncycastle/bcmail-jdk15on-1.64.pom 2019-10-17 12:17:15.687929117 +0200 +++ /work/SRC/openSUSE:Factory/.bouncycastle.new.2738/bcmail-jdk15on-1.65.pom 2020-05-01 11:08:25.167203670 +0200 @@ -1,90 +1,46 @@ -<?xml version="1.0" encoding="UTF-8" standalone="no"?> +<?xml version="1.0" encoding="UTF-8"?> <project> - - <modelVersion>4.0.0</modelVersion> - - <groupId>org.bouncycastle</groupId> - - <artifactId>bcmail-jdk15on</artifactId> - - <packaging>jar</packaging> - - <name>Bouncy Castle S/MIME API</name> - - <version>1.64</version> - - <description>The Bouncy Castle Java S/MIME APIs for handling S/MIME protocols. This jar contains S/MIME APIs for JDK 1.5 to JDK 11. The APIs can be used in conjunction with a JCE/JCA provider such as the one provided with the Bouncy Castle Cryptography APIs. The JavaMail API and the Java activation framework will also be needed.</description> - - <url>https://www.bouncycastle.org/java.html</url> - - <licenses> - - <license> - - <name>Bouncy Castle Licence</name> - - <url>https://www.bouncycastle.org/licence.html</url> - - <distribution>repo</distribution> - - </license> - - </licenses> - - <scm> - - <url>https://github.com/bcgit/bc-java</url> - - </scm> - - <issueManagement> - - <system>GitHub</system> - - <url>https://github.com/bcgit/bc-java/issues</url> - - </issueManagement> - - <developers> - - <developer> - - <id>feedback-crypto</id> - - <name>The Legion of the Bouncy Castle Inc.</name> - - <email>feedback-cry...@bouncycastle.org</email> - - </developer> - - </developers> - - <dependencies> - - <dependency> - - <groupId>org.bouncycastle</groupId> - - <artifactId>bcprov-jdk15on</artifactId> - - <version>1.64</version> - - <type>jar</type> - - </dependency> - - <dependency> - - <groupId>org.bouncycastle</groupId> - - <artifactId>bcpkix-jdk15on</artifactId> - - <version>1.64</version> - - <type>jar</type> - - </dependency> - - </dependencies> - + <modelVersion>4.0.0</modelVersion> + <groupId>org.bouncycastle</groupId> + <artifactId>bcmail-jdk15on</artifactId> + <packaging>jar</packaging> + <name>Bouncy Castle S/MIME API</name> + <version>1.65</version> + <description>The Bouncy Castle Java S/MIME APIs for handling S/MIME protocols. This jar contains S/MIME APIs for JDK 1.5 to JDK 1.8. The APIs can be used in conjunction with a JCE/JCA provider such as the one provided with the Bouncy Castle Cryptography APIs. The JavaMail API and the Java activation framework will also be needed.</description> + <url>http://www.bouncycastle.org/java.html</url> + <licenses> + <license> + <name>Bouncy Castle Licence</name> + <url>http://www.bouncycastle.org/licence.html</url> + <distribution>repo</distribution> + </license> + </licenses> + <scm> + <url>https://github.com/bcgit/bc-java</url> + </scm> + <issueManagement> + <system>GitHub</system> + <url>https://github.com/bcgit/bc-java/issues</url> + </issueManagement> + <developers> + <developer> + <id>feedback-crypto</id> + <name>The Legion of the Bouncy Castle Inc.</name> + <email>feedback-cry...@bouncycastle.org</email> + </developer> + </developers> + <dependencies> + <dependency> + <groupId>org.bouncycastle</groupId> + <artifactId>bcprov-jdk15on</artifactId> + <version>1.65</version> + <type>jar</type> + </dependency> + <dependency> + <groupId>org.bouncycastle</groupId> + <artifactId>bcpkix-jdk15on</artifactId> + <version>1.65</version> + <type>jar</type> + </dependency> + </dependencies> </project> ++++++ bcpg-jdk15on-1.64.pom -> bcpg-jdk15on-1.65.pom ++++++ --- /work/SRC/openSUSE:Factory/bouncycastle/bcpg-jdk15on-1.64.pom 2019-10-17 12:17:15.791928856 +0200 +++ /work/SRC/openSUSE:Factory/.bouncycastle.new.2738/bcpg-jdk15on-1.65.pom 2020-05-01 11:08:25.459204305 +0200 @@ -1,88 +1,45 @@ -<?xml version="1.0" encoding="UTF-8" standalone="no"?> +<?xml version="1.0" encoding="UTF-8"?> <project> - - <modelVersion>4.0.0</modelVersion> - - <groupId>org.bouncycastle</groupId> - - <artifactId>bcpg-jdk15on</artifactId> - - <packaging>jar</packaging> - - <name>Bouncy Castle OpenPGP API</name> - - <version>1.64</version> - - <description>The Bouncy Castle Java API for handling the OpenPGP protocol. This jar contains the OpenPGP API for JDK 1.5 to JDK 11. The APIs can be used in conjunction with a JCE/JCA provider such as the one provided with the Bouncy Castle Cryptography APIs.</description> - - <url>https://www.bouncycastle.org/java.html</url> - - <licenses> - - <license> - - <name>Bouncy Castle Licence</name> - - <url>https://www.bouncycastle.org/licence.html</url> - - <distribution>repo</distribution> - - </license> - - <license> - - <name>Apache Software License, Version 1.1</name> - - <url>https://www.apache.org/licenses/LICENSE-1.1</url> - - <distribution>repo</distribution> - - </license> - - </licenses> - - <scm> - - <url>https://github.com/bcgit/bc-java</url> - - </scm> - - <issueManagement> - - <system>GitHub</system> - - <url>https://github.com/bcgit/bc-java/issues</url> - - </issueManagement> - - <developers> - - <developer> - - <id>feedback-crypto</id> - - <name>The Legion of the Bouncy Castle Inc.</name> - - <email>feedback-cry...@bouncycastle.org</email> - - </developer> - - </developers> - - <dependencies> - - <dependency> - - <groupId>org.bouncycastle</groupId> - - <artifactId>bcprov-jdk15on</artifactId> - - <version>1.64</version> - - <type>jar</type> - - </dependency> - - </dependencies> - + <modelVersion>4.0.0</modelVersion> + <groupId>org.bouncycastle</groupId> + <artifactId>bcpg-jdk15on</artifactId> + <packaging>jar</packaging> + <name>Bouncy Castle OpenPGP API</name> + <version>1.65</version> + <description>The Bouncy Castle Java API for handling the OpenPGP protocol. This jar contains the OpenPGP API for JDK 1.5 to JDK 1.8. The APIs can be used in conjunction with a JCE/JCA provider such as the one provided with the Bouncy Castle Cryptography APIs.</description> + <url>http://www.bouncycastle.org/java.html</url> + <licenses> + <license> + <name>Bouncy Castle Licence</name> + <url>http://www.bouncycastle.org/licence.html</url> + <distribution>repo</distribution> + </license> + <license> + <name>Apache Software License, Version 1.1</name> + <url>http://www.apache.org/licenses/LICENSE-1.1</url> + <distribution>repo</distribution> + </license> + </licenses> + <scm> + <url>https://github.com/bcgit/bc-java</url> + </scm> + <issueManagement> + <system>GitHub</system> + <url>https://github.com/bcgit/bc-java/issues</url> + </issueManagement> + <developers> + <developer> + <id>feedback-crypto</id> + <name>The Legion of the Bouncy Castle Inc.</name> + <email>feedback-cry...@bouncycastle.org</email> + </developer> + </developers> + <dependencies> + <dependency> + <groupId>org.bouncycastle</groupId> + <artifactId>bcprov-jdk15on</artifactId> + <version>1.65</version> + <type>jar</type> + </dependency> + </dependencies> </project> ++++++ bcpkix-jdk15on-1.64.pom -> bcpkix-jdk15on-1.65.pom ++++++ --- /work/SRC/openSUSE:Factory/bouncycastle/bcpkix-jdk15on-1.64.pom 2019-10-17 12:17:15.831928756 +0200 +++ /work/SRC/openSUSE:Factory/.bouncycastle.new.2738/bcpkix-jdk15on-1.65.pom 2020-05-01 11:08:25.723204879 +0200 @@ -1,78 +1,40 @@ -<?xml version="1.0" encoding="UTF-8" standalone="no"?> +<?xml version="1.0" encoding="UTF-8"?> <project> - - <modelVersion>4.0.0</modelVersion> - - <groupId>org.bouncycastle</groupId> - - <artifactId>bcpkix-jdk15on</artifactId> - - <packaging>jar</packaging> - - <name>Bouncy Castle PKIX, CMS, EAC, TSP, PKCS, OCSP, CMP, and CRMF APIs</name> - - <version>1.64</version> - - <description>The Bouncy Castle Java APIs for CMS, PKCS, EAC, TSP, CMP, CRMF, OCSP, and certificate generation. This jar contains APIs for JDK 1.5 to JDK 11. The APIs can be used in conjunction with a JCE/JCA provider such as the one provided with the Bouncy Castle Cryptography APIs.</description> - - <url>https://www.bouncycastle.org/java.html</url> - - <licenses> - - <license> - - <name>Bouncy Castle Licence</name> - - <url>https://www.bouncycastle.org/licence.html</url> - - <distribution>repo</distribution> - - </license> - - </licenses> - - <scm> - - <url>https://github.com/bcgit/bc-java</url> - - </scm> - - <issueManagement> - - <system>GitHub</system> - - <url>https://github.com/bcgit/bc-java/issues</url> - - </issueManagement> - - <developers> - - <developer> - - <id>feedback-crypto</id> - - <name>The Legion of the Bouncy Castle Inc.</name> - - <email>feedback-cry...@bouncycastle.org</email> - - </developer> - - </developers> - - <dependencies> - - <dependency> - - <groupId>org.bouncycastle</groupId> - - <artifactId>bcprov-jdk15on</artifactId> - - <version>1.64</version> - - <type>jar</type> - - </dependency> - - </dependencies> - + <modelVersion>4.0.0</modelVersion> + <groupId>org.bouncycastle</groupId> + <artifactId>bcpkix-jdk15on</artifactId> + <packaging>jar</packaging> + <name>Bouncy Castle PKIX, CMS, EAC, TSP, PKCS, OCSP, CMP, and CRMF APIs</name> + <version>1.65</version> + <description>The Bouncy Castle Java APIs for CMS, PKCS, EAC, TSP, CMP, CRMF, OCSP, and certificate generation. This jar contains APIs for JDK 1.5 to JDK 1.8. The APIs can be used in conjunction with a JCE/JCA provider such as the one provided with the Bouncy Castle Cryptography APIs.</description> + <url>http://www.bouncycastle.org/java.html</url> + <licenses> + <license> + <name>Bouncy Castle Licence</name> + <url>http://www.bouncycastle.org/licence.html</url> + <distribution>repo</distribution> + </license> + </licenses> + <scm> + <url>https://github.com/bcgit/bc-java</url> + </scm> + <issueManagement> + <system>GitHub</system> + <url>https://github.com/bcgit/bc-java/issues</url> + </issueManagement> + <developers> + <developer> + <id>feedback-crypto</id> + <name>The Legion of the Bouncy Castle Inc.</name> + <email>feedback-cry...@bouncycastle.org</email> + </developer> + </developers> + <dependencies> + <dependency> + <groupId>org.bouncycastle</groupId> + <artifactId>bcprov-jdk15on</artifactId> + <version>1.65</version> + <type>jar</type> + </dependency> + </dependencies> </project> ++++++ bcprov-jdk15on-1.64.pom -> bcprov-jdk15on-1.65.pom ++++++ --- /work/SRC/openSUSE:Factory/bouncycastle/bcprov-jdk15on-1.64.pom 2019-10-17 12:17:15.867928665 +0200 +++ /work/SRC/openSUSE:Factory/.bouncycastle.new.2738/bcprov-jdk15on-1.65.pom 2020-05-01 11:08:26.143205792 +0200 @@ -1,17 +1,17 @@ -<?xml version="1.0" encoding="UTF-8" standalone="no"?> +<?xml version="1.0" encoding="UTF-8"?> <project> <modelVersion>4.0.0</modelVersion> <groupId>org.bouncycastle</groupId> <artifactId>bcprov-jdk15on</artifactId> <packaging>jar</packaging> <name>Bouncy Castle Provider</name> - <version>1.64</version> - <description>The Bouncy Castle Crypto package is a Java implementation of cryptographic algorithms. This jar contains JCE provider and lightweight API for the Bouncy Castle Cryptography APIs for Java 5 to Java 11.</description> - <url>https://www.bouncycastle.org/java.html</url> + <version>1.65</version> + <description>The Bouncy Castle Crypto package is a Java implementation of cryptographic algorithms. This jar contains JCE provider and lightweight API for the Bouncy Castle Cryptography APIs for JDK 1.5 to JDK 1.8.</description> + <url>http://www.bouncycastle.org/java.html</url> <licenses> <license> <name>Bouncy Castle Licence</name> - <url>https://www.bouncycastle.org/licence.html</url> + <url>http://www.bouncycastle.org/licence.html</url> <distribution>repo</distribution> </license> </licenses> ++++++ bctls-jdk15on-1.64.pom -> bctls-jdk15on-1.65.pom ++++++ --- /work/SRC/openSUSE:Factory/bouncycastle/bctls-jdk15on-1.64.pom 2019-10-17 12:17:15.923928525 +0200 +++ /work/SRC/openSUSE:Factory/.bouncycastle.new.2738/bctls-jdk15on-1.65.pom 2020-05-01 11:08:26.427206410 +0200 @@ -1,78 +1,40 @@ -<?xml version="1.0" encoding="UTF-8" standalone="no"?> +<?xml version="1.0" encoding="UTF-8"?> <project> - - <modelVersion>4.0.0</modelVersion> - - <groupId>org.bouncycastle</groupId> - - <artifactId>bctls-jdk15on</artifactId> - - <packaging>jar</packaging> - - <name>Bouncy Castle JSSE provider and TLS/DTLS API</name> - - <version>1.64</version> - - <description>The Bouncy Castle Java APIs for TLS and DTLS, including a provider for the JSSE.</description> - - <url>https://www.bouncycastle.org/java.html</url> - - <licenses> - - <license> - - <name>Bouncy Castle Licence</name> - - <url>https://www.bouncycastle.org/licence.html</url> - - <distribution>repo</distribution> - - </license> - - </licenses> - - <scm> - - <url>https://github.com/bcgit/bc-java</url> - - </scm> - - <issueManagement> - - <system>GitHub</system> - - <url>https://github.com/bcgit/bc-java/issues</url> - - </issueManagement> - - <developers> - - <developer> - - <id>feedback-crypto</id> - - <name>The Legion of the Bouncy Castle Inc.</name> - - <email>feedback-cry...@bouncycastle.org</email> - - </developer> - - </developers> - - <dependencies> - - <dependency> - - <groupId>org.bouncycastle</groupId> - - <artifactId>bcprov-jdk15on</artifactId> - - <version>1.64</version> - - <type>jar</type> - - </dependency> - - </dependencies> - + <modelVersion>4.0.0</modelVersion> + <groupId>org.bouncycastle</groupId> + <artifactId>bctls-jdk15on</artifactId> + <packaging>jar</packaging> + <name>Bouncy Castle JSSE provider and TLS/DTLS API</name> + <version>1.65</version> + <description>The Bouncy Castle Java APIs for TLS and DTLS, including a provider for the JSSE.</description> + <url>http://www.bouncycastle.org/java.html</url> + <licenses> + <license> + <name>Bouncy Castle Licence</name> + <url>http://www.bouncycastle.org/licence.html</url> + <distribution>repo</distribution> + </license> + </licenses> + <scm> + <url>https://github.com/bcgit/bc-java</url> + </scm> + <issueManagement> + <system>GitHub</system> + <url>https://github.com/bcgit/bc-java/issues</url> + </issueManagement> + <developers> + <developer> + <id>feedback-crypto</id> + <name>The Legion of the Bouncy Castle Inc.</name> + <email>feedback-cry...@bouncycastle.org</email> + </developer> + </developers> + <dependencies> + <dependency> + <groupId>org.bouncycastle</groupId> + <artifactId>bcprov-jdk15on</artifactId> + <version>1.65</version> + <type>jar</type> + </dependency> + </dependencies> </project> ++++++ r1rv64.tar.gz -> r1rv65.tar.gz ++++++ /work/SRC/openSUSE:Factory/bouncycastle/r1rv64.tar.gz /work/SRC/openSUSE:Factory/.bouncycastle.new.2738/r1rv65.tar.gz differ: char 30, line 2