Alexander Scheel

@ckelleyRH Hmmm I wonder if something has changed in the NSS layer. It might be worth talking to Bob and seeing if downgrading NSS versions helps (around F32's perhaps).

@rjrelyea Just for some context, check out this old Pagure issue: https://pagure.io/jss/issue/26 --- the TL;DR is that JDK used to ship the Java equivalent of `pkcs11*.h` and we needed this...

When we complete #150 / #196, does the need for this go away? We're looking at the other ticket ([number 1 on pagure](https://pagure.io/jss/issue/1)) as higher priority than GCM currently. But...

Just in case anyone wants to pick this up in the future... There's an existing [parameter spec](https://docs.oracle.com/javase/8/docs/api/javax/crypto/spec/GCMParameterSpec.html) we should use. The hard part is `PK11Cipher` only understands basic (IV-only) [cipher...

@boegi1 Sorry if I'm missing something, but could call `headers.Remove("Version")` instead of setting it to `null`?

@boegi1 Right, I think this is fine for after-the-fact removal. But I'm curious about why you'd want to pass a dictionary with a header key (set to the `null` value)...

Ah, so we do: ```c# using Org.BouncyCastle.Bcpg; var headers = new Dictionary(); ArmoredOutputStream aos = new ArmoredOutputStream(Console.OpenStandardOutput(), headers); aos.WriteByte(0x00); aos.Close(); ``` I think this change makes sense, but I'll double...

@ggrote Do you have an example? When I tried to reproduce this with: ```c# using System; using System.Collections.Generic; using System.IO; using System.Text; using Org.BouncyCastle.Asn1; using Org.BouncyCastle.Asn1.X509; using Org.BouncyCastle.OpenSsl; using Org.BouncyCastle.Utilities.Encoders;...

@sbernard31 Likely this is an issue for OpenJDK; per https://bugs.openjdk.org/browse/JDK-8049402, it doesn't look like it supports point 4 ("Out-of-band PSK establishment") in the interfaces. Without interfaces from the JDK itself,...

@dghgit I don't think this is quite right. Note here: https://datatracker.ietf.org/doc/html/rfc4121#section-4.1 The format of this message is: ``` GSS-API DEFINITIONS ::= BEGIN MechType ::= OBJECT IDENTIFIER -- representing Kerberos V5...