Discussion:
[iText-questions] iTextG still using Bouncy Castle ("BC") instead of Spongy Castle ("SC") for certain operations
Jaime Hablutzel Egoavil
2015-11-17 22:13:07 UTC
Permalink
From the iTextG 5.5.7 source code around
com.itextpdf.text.pdf.security.CertificateVerification:197:

public static boolean verifyOcspCertificates(BasicOCSPResp ocsp, KeyStore
keystore, String provider) {
if (provider == null)
provider = *"BC"*;
try {
for (Enumeration<String> aliases = keystore.aliases();
aliases.hasMoreElements();) {

It is using the "BC" string where it should use "SC", quoting from
https://rtyley.github.io/spongycastle/:

the Java Security API Provider name is now SC rather than BC


Note that the previous one is only one example where the "BC" provider name
is still used, other ocurrences can be found by searching in the iTextG
source code.

Regards.
--
Jaime Hablutzel - RPC 994690880
Loading...