<div dir="ltr">Thanks for the clarifications on this stuff.<div><br></div><div>Attached is a patch for the xmltooling Java "trunk" that upgrades it to Bouncy Castle 1.50. There were some changes in the 1.47 timeline, so I followed the porting guide here:</div>
<div><br></div><div><a href="http://www.bouncycastle.org/wiki/display/JA1/Porting+from+earlier+BC+releases+to+1.47+and+later">http://www.bouncycastle.org/wiki/display/JA1/Porting+from+earlier+BC+releases+to+1.47+and+later</a><br>
</div><div><br></div><div>All the tests in "xmltooling" pass with these changes.</div><div><br></div><div>(I also removed "commons-codec," which is not referenced in the source, but can change that if it makes something else work somewhere.)q</div>
<div><br></div><div>Can you let me know if you can accept this? I'm happy to open a JIRA if you show me how and where. Thanks!</div></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Sat, Jul 26, 2014 at 10:16 AM, Cantor, Scott <span dir="ltr"><<a href="mailto:cantor.2@osu.edu" target="_blank">cantor.2@osu.edu</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">On 7/25/14, 2:30 PM, "Greg Brail" <<a href="mailto:greg@apigee.com">greg@apigee.com</a>> wrote:<br>
<br>
>Right now, xmltooling is depending on version 1.46 of "bcprov-jdk15,"<br>
>whereas Bouncy Castle is up to version 1.50 now (and in fact just<br>
>released 1.51). Furthermore, version 1.46 is from 2011.<br>
><br>
>There's a little porting required to make this change, and I'm willing to<br>
>submit a patch using whatever your process is.<br>
><br>
>Can you let me know how to proceed with this? Thanks!<br>
<br>
Well, you can file a RFE in Jira and attach the patch. As far as whether<br>
we'll accept it, it really depends on whether it results in API changes,<br>
and the potential for impact on the IdP.<br>
<br>
At this point given that the older code is in maintenance mode, I don't<br>
know that I would be in favor of making that change, but it would depend<br>
on exactly how impactful it is.<br>
<span class="HOEnZb"><font color="#888888"><br>
-- Scott<br>
<br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:dev-unsubscribe@shibboleth.net">dev-unsubscribe@shibboleth.net</a><br>
</font></span></blockquote></div><br><br clear="all"><div><br></div>-- <br><div dir="ltr"><font color="#333333"><b>greg brail</b> |</font> <b><a href="https://apigee.com/" rel="nofollow" style="color:rgb(6,75,124)!important;text-decoration:none" target="_blank"><font color="#ff6600">api</font><font color="#666666">gee</font></a></b> <font color="#333333">| </font><span style="font-size:10pt;color:rgb(51,204,255)">twitter </span><font color="#333333" style="font-size:10pt"><a href="http://twitter.com/gbrail" rel="nofollow" style="color:rgb(6,75,124)!important;text-decoration:none" target="_blank">@gbrail</a></font><div>
<font color="#333333"><br></font><div><font color="#333333"><a href="https://pages.apigee.com/i-love-apis-2014.html?utm_source=sig&utm_medium=email" target="_blank"><img src="https://sites.google.com/a/apigee.com/branding/_/rsrc/1400116390686/email-footers/email_footer_2014.png"></a><br>
</font><div><br></div></div></div></div>
</div>