Branch: refs/heads/master
  Home:   https://github.com/jenkinsci/bouncycastle-api-plugin
  Commit: ff5857655019c587ca226bf2d02061c13f0d6dc5
      
https://github.com/jenkinsci/bouncycastle-api-plugin/commit/ff5857655019c587ca226bf2d02061c13f0d6dc5
  Author: Thomas de Grenier de Latour <thomas.degrenierdelat...@orange.com>
  Date:   2020-06-26 (Fri, 26 Jun 2020)

  Changed paths:
    A src/main/java/jenkins/bouncycastle/api/BcProviderRegistration.java
    M src/main/java/jenkins/bouncycastle/api/InstallBouncyCastleJCAProvider.java
    M src/main/java/jenkins/bouncycastle/api/SecurityProviderInitializer.java
    A 
src/test/java/jenkins/bouncycastle/api/InstallBouncyCastleJCAProviderTest.java

  Log Message:
  -----------
  added jenkins.bouncycastle.prioritizeJceProvider system property

Added a new (optional) boolean system property which affects how BouncyCastle
is registered as a JCE provider.  When `true`, the provider is inserted at the
beginning of the list (in 2nd position), instead of being added at the end.

It could help in situations where BC does a better job than the JDK. In
particular, it should solve issues with SSH connections to some SunOS servers,
which end up with this exception (with JSCH from the publish-over-ssh plugin):

```
java.security.InvalidAlgorithmParameterException: DH key size must be multiple
of 64, and can only range from 512 to 4096 (inclusive). The specific key size
2047 is not supported
```

See https://stackoverflow.com/a/43121515, where this idea comes from.
In this case, simply having BouncyCastle registered but as the last provider is
not good enough to solve the issue.

Probably it could have been a solution for
[JENKINS-35231](https://issues.jenkins-ci.org/browse/JENKINS-35231) too.

The system property added here is expected to be set on Jenkins main process.
Registration on agents will follow the same preference, and not a property of
the agent process.


  Commit: 430df90f693aff7ce4f9614db6d728db90dbd743
      
https://github.com/jenkinsci/bouncycastle-api-plugin/commit/430df90f693aff7ce4f9614db6d728db90dbd743
  Author: Jeff Thompson <37345299+jeffre...@users.noreply.github.com>
  Date:   2021-03-05 (Fri, 05 Mar 2021)

  Changed paths:
    M src/main/java/jenkins/bouncycastle/api/BcProviderRegistration.java

  Log Message:
  -----------
  Link target moved.


  Commit: a5bf9e72ef582602b42faebb9103e01ae3ba51ae
      
https://github.com/jenkinsci/bouncycastle-api-plugin/commit/a5bf9e72ef582602b42faebb9103e01ae3ba51ae
  Author: Jeff Thompson <37345299+jeffre...@users.noreply.github.com>
  Date:   2021-03-05 (Fri, 05 Mar 2021)

  Changed paths:
    M 
src/test/java/jenkins/bouncycastle/api/InstallBouncyCastleJCAProviderTest.java

  Log Message:
  -----------
  Add the terminating newline since GitHub points it out.


  Commit: 99a8adc0de8b918611f13de519590700a9bb9011
      
https://github.com/jenkinsci/bouncycastle-api-plugin/commit/99a8adc0de8b918611f13de519590700a9bb9011
  Author: Jeff Thompson <37345299+jeffre...@users.noreply.github.com>
  Date:   2021-03-05 (Fri, 05 Mar 2021)

  Changed paths:
    A src/main/java/jenkins/bouncycastle/api/BcProviderRegistration.java
    M src/main/java/jenkins/bouncycastle/api/InstallBouncyCastleJCAProvider.java
    M src/main/java/jenkins/bouncycastle/api/SecurityProviderInitializer.java
    A 
src/test/java/jenkins/bouncycastle/api/InstallBouncyCastleJCAProviderTest.java

  Log Message:
  -----------
  Merge pull request #29 from thomasgl-orange/prioritizeBC

added jenkins.bouncycastle.prioritizeJceProvider system property


Compare: 
https://github.com/jenkinsci/bouncycastle-api-plugin/compare/c2a5c7773694...99a8adc0de8b

-- 
You received this message because you are subscribed to the Google Groups 
"Jenkins Commits" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to jenkinsci-commits+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/jenkinsci-commits/jenkinsci/bouncycastle-api-plugin/push/refs/heads/master/c2a5c7-99a8ad%40github.com.

Reply via email to