alfresco-esign-cert icon indicating copy to clipboard operation
alfresco-esign-cert copied to clipboard

Published 20 hours ago • verified publisher icon keensoft

Dependencies handling

Open tsiakmaki opened this issue 6 years ago • 7 comments

After your upgrade, you use itext 5.5.13 https://github.com/keensoft/alfresco-esign-cert/blob/master/esign-cert-repo/pom.xml#L62 where bcprov-jdk15on 1.49 and bcpkix-jdk15on are optional. For some signatures, these new versions seem to be critical, as they contain fixes for timestamp and certificate parsing.

In our installation, we list: tomcat/webapps/alfresco/WEB-INF/lib/itextpdf-5.0.6.jar tomcat/webapps/alfresco/WEB-INF/lib/itextpdf-5.5.10.jar tomcat/webapps/alfresco/WEB-INF/lib/bcmail-jdk14-1.38.jar tomcat/webapps/alfresco/WEB-INF/lib/bcmail-jdk15-1.46.jar tomcat/webapps/alfresco/WEB-INF/lib/bcprov-jdk14-1.38.jar tomcat/webapps/alfresco/WEB-INF/lib/bcprov-jdk15-1.46.jar tomcat/webapps/alfresco/WEB-INF/lib/bctsp-jdk14-1.38.jar

(I guess the latest versions are being used. )

Now, I whould like to use 5.5.13 and bcprov, bcpkix 1.49, not bctsp and bcmail. How should I handle this mess?

tsiakmaki avatar Nov 12 '18 09:11 tsiakmaki