On 9/15/07, Kevan Miller [EMAIL PROTECTED] wrote:
On Sep 14, 2007, at 3:26 PM, Venkata Krishnan wrote:
Hi,
We are using Apache Rampart 1.3 to enable ws security into the ws-
binding-axis2 module for Apache Tuscany v1.0 which we hope to
release in a week. Using Rampart seems to bring
On Sep 15, 2007, at 5:59 AM, ant elder wrote:
On 9/15/07, Kevan Miller [EMAIL PROTECTED] wrote:
On Sep 14, 2007, at 3:26 PM, Venkata Krishnan wrote:
Hi,
We are using Apache Rampart 1.3 to enable ws security into the ws-
binding-axis2 module for Apache Tuscany v1.0 which we hope to
FWIW, just as a general FYI, Abdera also ships the bouncycastle jar but
use of the jar is limited to the optional security and example modules
and it's use has been documented in several locations.
- James
Kevan Miller wrote:
On Sep 15, 2007, at 5:59 AM, ant elder wrote:
On 9/15/07, Kevan
Kevan Miller wrote:
That previous discussion was about including a JXTA dependency, for this one
I think we're just following what we've seen other Apache projects that
support ws-security are doing, so I guess we were assuming was ok. Are you
saying its not ok to distribute the BouncyCastle
Well, as far as Abdera is concerned, there'd be absolutely no problem
with not shipping the jar. We can easily document how to go off and get
the jar and the functions we're using it for can be provided by other
crypto providers. If the board does not want us shipping it, just let
us know and
James M Snell wrote:
Well, as far as Abdera is concerned, there'd be absolutely no problem
with not shipping the jar. We can easily document how to go off and get
the jar and the functions we're using it for can be provided by other
crypto providers. If the board does not want us shipping
Kevan Miller wrote:
There was a discussion earlier this year about Tuscany, BouncyCastle,
and a patented IDEA algorithm implemented by BouncyCastle --
http://mail-archives.apache.org/mod_mbox/incubator-general/200702.mbox/[EMAIL
PROTECTED]
FWIW, the IDEA patent expires on 25-05-2010. I
I'll say Generally Soft. There are a couple of classes that require
bouncy to compile, but their use is entirely optional. Two of the
classes are example code that is only shipped in source form -- we test
compile the examples before shipping them. The other classes are
optional utility classes
As far as Tuscany is concerned our dependency on BouncyCastle comes thro our
use of Rampart 1.3. I just checked up the Rampart distros and it does have
the bouncy castle jar packed in it - releases and snapshots (eg.
http://people.apache.org/dist/rampart/nightly/rampart-SNAPSHOT.zip). Though
