Hi,

just for your information, the PR (https://github.com/apache/cxf/pull/1660)
requires version of wss4f to be 3.0.3 (to contain
https://issues.apache.org/jira/browse/WSS-709)

Best regards,
Jiri

On Tue, Feb 13, 2024 at 10:53 AM Peter Palaga <ppal...@redhat.com> wrote:

> Thanks, great to hear that, Andriy.
>
> It would be great if we could get
> https://github.com/apache/cxf/pull/1660 merged in some form before the
> release.
> The main motivation is to be able to run CXF on FIPS-enabled systems. If
> the customized algo suite, that the PR proposes, is questionable, I'd be
> also fine with introducing a couple of new suites with fixed
> non-standard names, like already done in the past for fixing CVEs. It
> would be nice to hear other community members' thoughts.
>
> Thanks again,
>
> -- Peter
>
> On 13/02/2024 02:35, Andriy Redko wrote:
> > Hi Peter,
> >
> > Thanks a lot for reminding, I belive we are long overdue on that, @Dan,
> @Colm
> > may need your help please preparing the next release train (or any
> objection folks)?
> > Thank you!
> >
> > Best Regards,
> >      Andriy Redko
> >
> >> Hi,
> >> we are preparing Quarkus CXF to release it for Quarkus 3.8 which is
> going to be a LTS (Long Term Support) release.
> >> I wonder whether we could count on getting CXF 4.0.4 by February 21st
> to be able to use it in that release?
> >> Thanks,
> >> -- Peter
> >
>
>

-- 
Jiri Ondrusek <jondr...@redhat.com>
Senior Software Engineer
Red Hat Fuse

Reply via email to