[PDFBOX-3831] v2.0.6 still has hardcoded reference to BouncyCastleProvider

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.0.6
• Fix Version/s: 2.0.7
• Component/s: Crypto
• Assignee: Andreas Lehmkühler
• Reporter: Naohiro OOHIRA
• Created: 15/Jun/17 08:18
• Updated: 21/Jul/17 04:40
• Resolved: 16/Jun/17 09:38

Description

It seems that PDFBox v2.0.6 still has a hardcoded reference to BouncyCastleProvider, though release note says it was removed.

• PDFBOX-2963 - Remove Bouncy Castle Provider Reference

public final class SecurityHandlerFactory
{
    /** Singleton instance */
    public static final SecurityHandlerFactory INSTANCE = new SecurityHandlerFactory();

    static
    {
        Security.addProvider(new BouncyCastleProvider());
    }

Is it as expected that the following modification was only committed to trunk and not committed to 2.0 branch?

• https://svn.apache.org/viewvc?view=revision&revision=1789414

I use PDFBox v2.0.5 to parse a pdf file, but don't want it to add dependency to Bouncy Castle because it globally register a Provider instance.

Issue Links

• relates to: PDFBOX-2963 Remove Bouncy Castle Provider Reference