[jira] [Created] (CXF-8970) ensure we can build and run without bouncycastle dependencies

2024-01-12 Thread Freeman Yue Fang (Jira)
Freeman Yue Fang created CXF-8970:
-

 Summary: ensure we can build and run without bouncycastle 
dependencies
 Key: CXF-8970
 URL: https://issues.apache.org/jira/browse/CXF-8970
 Project: CXF
  Issue Type: New Feature
Reporter: Freeman Yue Fang


So far for most security modules in CXF we don't need the BouncyCastle 
dependencies, but in rs/jose security module we have some code using 
BouncyCastle API directly. But we actually can use java security API instead 
and use the counterpart security algorithm from in-jdk default security 
providers so that CXF doesn't have hard BouncyCastle dependencies 



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Assigned] (CXF-8970) ensure we can build and run without bouncycastle dependencies

2024-01-12 Thread Freeman Yue Fang (Jira)


 [ 
https://issues.apache.org/jira/browse/CXF-8970?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Freeman Yue Fang reassigned CXF-8970:
-

Assignee: Freeman Yue Fang

> ensure we can build and run without bouncycastle dependencies
> -
>
> Key: CXF-8970
> URL: https://issues.apache.org/jira/browse/CXF-8970
> Project: CXF
>  Issue Type: New Feature
>Reporter: Freeman Yue Fang
>Assignee: Freeman Yue Fang
>Priority: Major
>
> So far for most security modules in CXF we don't need the BouncyCastle 
> dependencies, but in rs/jose security module we have some code using 
> BouncyCastle API directly. But we actually can use java security API instead 
> and use the counterpart security algorithm from in-jdk default security 
> providers so that CXF doesn't have hard BouncyCastle dependencies 



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Commented] (CXF-8970) ensure we can build and run without bouncycastle dependencies

2024-01-12 Thread Freeman Yue Fang (Jira)


[ 
https://issues.apache.org/jira/browse/CXF-8970?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17806127#comment-17806127
 ] 

Freeman Yue Fang commented on CXF-8970:
---

PR is
https://github.com/apache/cxf/pull/1645

> ensure we can build and run without bouncycastle dependencies
> -
>
> Key: CXF-8970
> URL: https://issues.apache.org/jira/browse/CXF-8970
> Project: CXF
>  Issue Type: New Feature
>Reporter: Freeman Yue Fang
>Assignee: Freeman Yue Fang
>Priority: Major
>
> So far for most security modules in CXF we don't need the BouncyCastle 
> dependencies, but in rs/jose security module we have some code using 
> BouncyCastle API directly. But we actually can use java security API instead 
> and use the counterpart security algorithm from in-jdk default security 
> providers so that CXF doesn't have hard BouncyCastle dependencies 



--
This message was sent by Atlassian Jira
(v8.20.10#820010)