Uploaded image for project: 'Ambari'
  1. Ambari
  2. AMBARI-24507

Remove dependency on org.bouncycastle bcprov-jdk15on before version 1.6.0 for Ambari Server

    XMLWordPrintableJSON

    Details

      Description

      Remove dependency on org.bouncycastle bcprov-jdk15on before version 1.6.0 for Ambari Server security concerns. See

      This dependency is compiled into the apacheds-all.jar from

          <dependency>
            <groupId>org.apache.directory.server</groupId>
            <artifactId>apacheds-all</artifactId>
            <version>2.0.0-M24</version>
          </dependency>
      

      The relevant parts of this need to be broken out and the offending bouncy castle JAR needs to be excluded as needed.

        Attachments

          Activity

            People

            • Assignee:
              rlevas Robert Levas
              Reporter:
              rlevas Robert Levas
            • Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:

                Time Tracking

                Estimated:
                Original Estimate - Not Specified
                Not Specified
                Remaining:
                Remaining Estimate - 0h
                0h
                Logged:
                Time Spent - 1h
                1h