Uploaded image for project: 'PDFBox'
  1. PDFBox
  2. PDFBOX-3831

v2.0.6 still has hardcoded reference to BouncyCastleProvider

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 2.0.6
    • Fix Version/s: 2.0.7
    • Component/s: Crypto
    • Labels:
      None

      Description

      It seems that PDFBox v2.0.6 still has a hardcoded reference to BouncyCastleProvider, though release note says it was removed.

      • PDFBOX-2963 - Remove Bouncy Castle Provider Reference
      public final class SecurityHandlerFactory
      {
          /** Singleton instance */
          public static final SecurityHandlerFactory INSTANCE = new SecurityHandlerFactory();
      
          static
          {
              Security.addProvider(new BouncyCastleProvider());
          }
      

      Is it as expected that the following modification was only committed to trunk and not committed to 2.0 branch?

      I use PDFBox v2.0.5 to parse a pdf file, but don't want it to add dependency to Bouncy Castle because it globally register a Provider instance.

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                lehmi Andreas Lehmkühler
                Reporter:
                oohira Naohiro OOHIRA
              • Votes:
                0 Vote for this issue
                Watchers:
                3 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: