Re: Export Notification - Using BouncyCastle in Tuscany Rel 1.0

2007-09-17 Thread Matt Hogstrom
On Sep 16, 2007, at 11:20 AM, Kevan Miller wrote: I wasn't involved in the forking of the code. However, it is my understanding that we only forked the bare minimum function (ASN1.codec) that Geronimo required. So, very likely that our code would not suit the needs of other projects.

Re: Export Notification - Using BouncyCastle in Tuscany Rel 1.0

2007-09-17 Thread Henning Schmiedehausen
Please be aware that rebuilding the jar means that it is no longer signed and does not work as a security provider. Ff you want to use the bouncycastle security provider and this recompiled jar in the same application, you will get clashes. Class Loader fun. The whole monty. :-) The cleanest solu

RE: Export Notification - Using BouncyCastle in Tuscany Rel 1.0

2007-09-16 Thread Noel J. Bergman
You ought to be able to use the JAMES export notification as a sample, since we worked with Cliff to do it. --- Noel - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

Re: Export Notification - Using BouncyCastle in Tuscany Rel 1.0

2007-09-16 Thread William A. Rowe, Jr.
Kevan Miller wrote: > On Sep 15, 2007, at 10:03 PM, William A. Rowe, Jr. wrote: > >> E.g. those projects which ship openssl binaries must do so by inhibiting >> the IDEA/MDC2/RC5 algorithms, which is trivial. Do the bouncycastle jar >> distros have a similar segregation? An unencumbered flavor w

Re: Export Notification - Using BouncyCastle in Tuscany Rel 1.0

2007-09-16 Thread Kevan Miller
On Sep 16, 2007, at 11:37 AM, ant elder wrote: On 9/16/07, Kevan Miller <[EMAIL PROTECTED]> wrote: I don't see a an unencumbered BouncyCastle distribution which is not encumbered. Is there any reason we can't just make one? The license seems ok for that: http://www.bouncycastle.org/lic

Re: Export Notification - Using BouncyCastle in Tuscany Rel 1.0

2007-09-16 Thread ant elder
On 9/16/07, Kevan Miller <[EMAIL PROTECTED]> wrote: I don't see a an unencumbered BouncyCastle distribution which is not > encumbered. Is there any reason we can't just make one? The license seems ok for that: http://www.bouncycastle.org/licence.html. Is it just the one class in the bouncycast

Re: Export Notification - Using BouncyCastle in Tuscany Rel 1.0

2007-09-16 Thread Kevan Miller
On Sep 15, 2007, at 10:27 PM, William A. Rowe, Jr. wrote: Kevan Miller wrote: There was a discussion earlier this year about Tuscany, BouncyCastle, and a patented IDEA algorithm implemented by BouncyCastle -- http://mail-archives.apache.org/mod_mbox/incubator-general/ 200702.mbox/[EMAIL

Re: Export Notification - Using BouncyCastle in Tuscany Rel 1.0

2007-09-16 Thread Kevan Miller
On Sep 15, 2007, at 10:03 PM, William A. Rowe, Jr. wrote: Kevan Miller wrote: That previous discussion was about including a JXTA dependency, for this one I think we're just following what we've seen other Apache projects that support ws-security are doing, so I guess we were assuming was

Re: Export Notification - Using BouncyCastle in Tuscany Rel 1.0

2007-09-15 Thread Venkata Krishnan
As far as Tuscany is concerned our dependency on BouncyCastle comes thro our use of Rampart 1.3. I just checked up the Rampart distros and it does have the bouncy castle jar packed in it - releases and snapshots (eg. http://people.apache.org/dist/rampart/nightly/rampart-SNAPSHOT.zip). Though this

Re: Export Notification - Using BouncyCastle in Tuscany Rel 1.0

2007-09-15 Thread James M Snell
I'll say "Generally Soft". There are a couple of classes that require bouncy to compile, but their use is entirely optional. Two of the classes are example code that is only shipped in source form -- we test compile the examples before shipping them. The other classes are optional utility classe

Re: Export Notification - Using BouncyCastle in Tuscany Rel 1.0

2007-09-15 Thread William A. Rowe, Jr.
Kevan Miller wrote: >>> >>> There was a discussion earlier this year about Tuscany, BouncyCastle, >>> and a patented IDEA algorithm implemented by BouncyCastle -- http://mail-archives.apache.org/mod_mbox/incubator-general/200702.mbox/[EMAIL PROTECTED] FWIW, the IDEA patent expires on 25-05-2010

Re: Export Notification - Using BouncyCastle in Tuscany Rel 1.0

2007-09-15 Thread William A. Rowe, Jr.
James M Snell wrote: > Well, as far as Abdera is concerned, there'd be absolutely no problem > with not shipping the jar. We can easily document how to go off and get > the jar and the functions we're using it for can be provided by other > crypto providers. If the board does not want us shipping

Re: Export Notification - Using BouncyCastle in Tuscany Rel 1.0

2007-09-15 Thread James M Snell
Well, as far as Abdera is concerned, there'd be absolutely no problem with not shipping the jar. We can easily document how to go off and get the jar and the functions we're using it for can be provided by other crypto providers. If the board does not want us shipping it, just let us know and I'l

Re: Export Notification - Using BouncyCastle in Tuscany Rel 1.0

2007-09-15 Thread William A. Rowe, Jr.
Kevan Miller wrote: >> >> That previous discussion was about including a JXTA dependency, for this one >> I think we're just following what we've seen other Apache projects that >> support ws-security are doing, so I guess we were assuming was ok. Are you >> saying its not ok to distribute the Boun

Re: Export Notification - Using BouncyCastle in Tuscany Rel 1.0

2007-09-15 Thread James M Snell
FWIW, just as a general FYI, Abdera also ships the bouncycastle jar but use of the jar is limited to the optional security and example modules and it's use has been documented in several locations. - James Kevan Miller wrote: > > On Sep 15, 2007, at 5:59 AM, ant elder wrote: > >> On 9/15/07, Ke

Re: Export Notification - Using BouncyCastle in Tuscany Rel 1.0

2007-09-15 Thread Kevan Miller
On Sep 15, 2007, at 5:59 AM, ant elder wrote: On 9/15/07, Kevan Miller <[EMAIL PROTECTED]> wrote: On Sep 14, 2007, at 3:26 PM, Venkata Krishnan wrote: Hi, We are using Apache Rampart 1.3 to enable ws security into the ws- binding-axis2 module for Apache Tuscany v1.0 which we hope to relea

Re: Export Notification - Using BouncyCastle in Tuscany Rel 1.0

2007-09-15 Thread ant elder
On 9/15/07, Kevan Miller <[EMAIL PROTECTED]> wrote: > > > On Sep 14, 2007, at 3:26 PM, Venkata Krishnan wrote: > > > Hi, > > > > We are using Apache Rampart 1.3 to enable ws security into the ws- > > binding-axis2 module for Apache Tuscany v1.0 which we hope to > > release in a week. Using Rampart

Re: Export Notification - Using BouncyCastle in Tuscany Rel 1.0

2007-09-14 Thread Kevan Miller
On Sep 14, 2007, at 3:26 PM, Venkata Krishnan wrote: Hi, We are using Apache Rampart 1.3 to enable ws security into the ws- binding-axis2 module for Apache Tuscany v1.0 which we hope to release in a week. Using Rampart seems to bring in the Bouncycastle dependency for encryption function