bouncy-gpg icon indicating copy to clipboard operation
bouncy-gpg copied to clipboard

Allow setting name and modification date for literal data packet; BC …

Open jdurani opened this issue 2 years ago • 1 comments

BC 1.77 and jdk8on:

  • since BC jdk15on stopped with version 1.67 and there are still vulnerabilities, moved to jdk18on
  • source and target compatibility is set to Java 8 anyway
  • updated to latest version

New providers:

  • in some cases, we need to set a name and/or modification date for a literal data packet in encrypted/signed file. This library is designed to work with stream, yet we can stream a file content...
  • ... or, we can simulate file or need to set for whatever reason name of literal data
  • this PR has two new functional interfaces to provide name and/or modification date
  • default is to use current behavior (an empty string as a name "" and current date new Date() as a modification date)
  • implemented in Build interface

jdurani avatar Jan 10 '24 07:01 jdurani

Logo Checkmarx One – Scan Summary & Details174873e6-af58-45bb-8742-ffbedfa27297

New Issues

Severity Issue Source File / Package Checkmarx Insight
LOW Improper_Resource_Shutdown_or_Release /src/main/java/name/neuhalfen/projects/crypto/bouncycastle/openpgp/encrypting/PGPEncryptingStream.java: 147 Attack Vector
LOW Improper_Resource_Shutdown_or_Release /src/main/java/name/neuhalfen/projects/crypto/bouncycastle/openpgp/encrypting/PGPEncryptingStream.java: 249 Attack Vector

Fixed Issues

Severity Issue Source File / Package
LOW Improper_Resource_Shutdown_or_Release /src/main/java/name/neuhalfen/projects/crypto/bouncycastle/openpgp/encrypting/PGPEncryptingStream.java: 211
LOW Improper_Resource_Shutdown_or_Release /src/main/java/name/neuhalfen/projects/crypto/bouncycastle/openpgp/encrypting/PGPEncryptingStream.java: 111
LOW TruffleHog_HighEntropy_Strings /src/test/java/name/neuhalfen/projects/crypto/bouncycastle/openpgp/testtooling/ExampleMessages.java: 733
LOW TruffleHog_HighEntropy_Strings /src/test/java/name/neuhalfen/projects/crypto/bouncycastle/openpgp/testtooling/ExampleMessages.java: 732
LOW TruffleHog_HighEntropy_Strings /src/test/java/name/neuhalfen/projects/crypto/bouncycastle/openpgp/testtooling/ExampleMessages.java: 731
LOW TruffleHog_HighEntropy_Strings /src/test/java/name/neuhalfen/projects/crypto/bouncycastle/openpgp/testtooling/ExampleMessages.java: 730
LOW TruffleHog_HighEntropy_Strings /src/test/java/name/neuhalfen/projects/crypto/bouncycastle/openpgp/testtooling/ExampleMessages.java: 729
LOW TruffleHog_HighEntropy_Strings /src/test/java/name/neuhalfen/projects/crypto/bouncycastle/openpgp/testtooling/ExampleMessages.java: 728
LOW TruffleHog_HighEntropy_Strings /src/test/java/name/neuhalfen/projects/crypto/bouncycastle/openpgp/testtooling/ExampleMessages.java: 727
LOW TruffleHog_HighEntropy_Strings /src/test/java/name/neuhalfen/projects/crypto/bouncycastle/openpgp/testtooling/ExampleMessages.java: 726

neuhalje avatar Jan 10 '24 08:01 neuhalje