Open Hub
Open Hub

 Settings

1
I Use This!
Very High Activity

Commits : Listings

Analyzed about 11 hours ago. based on code collected 1 day ago.
Nov 07, 2025 — Nov 07, 2026
Commit Message Contributor Files Modified Lines Added Lines Removed Code Location Date
Resync the jdk1.4 JcaContentSignerBuilder overlay with base, restoring the FixedLengthContentSigner/ExtendedContentSigner wrapping it had predated entirely - CMS SignerInfoGenerator.getPredictedEncodedLength could never return a length prediction on the jdk1.4 build for any algorithm as a result, surfacing as NewSignedDataTest.testEd448PredictedEncodedLength. Genuine 1.4 adaptations kept: PSS digest names are derived from the signature algorithm string rather than PSSParameterSpec.getDigestAlgorithm()/getMGFParameters()/getTrailerField() or MGF1ParameterSpec, none of which exist on JRE 1.4; the LMS-only constructor and the real-CompositePrivateKey/buildComposite() path are dropped, since org.bouncycastle.pqc.crypto.lms and composite JCE support are both excluded from the jdk1.4 distribution.
David Hook
More... 4 months ago
Resync the three jdk1.4 cert-path overlays (jce/provider/CertPathValidatorUtilities, jce/provider/RFC3280CertPathUtilities, x509/CertPathValidatorUtilities) with base, folding in the ReasonsMask API rename, the PKIXCRLValidator/PKIXPolicyNode extraction, and the ExtException-to-java.security.cert migration those overlays had missed since each landed - build1-4 has been broken since the first of these changes regardless of anything else. Also fix jdk1.4 test-tree compile breaks left by unrelated recent commits (SM9 Destroyable, a PKIXRevocationChecker test, an EST import pulled into ParseTest, String.contains in PBETest, a stale PKIXCertPathReviewer test reference, and two getDeclaredMethod varargs call sites) so build-test compiles and the full jdk1.4 suite runs again.
David Hook
More... 4 months ago
Resync the three jdk1.4 cert-path overlays (jce/provider/CertPathValidatorUtilities, jce/provider/RFC3280CertPathUtilities, x509/CertPathValidatorUtilities) with base, folding in the ReasonsMask API rename, the PKIXCRLValidator/PKIXPolicyNode extraction, and the ExtException-to-java.security.cert migration those overlays had missed since each landed - build1-4 has been broken since the first of these changes regardless of anything else. Also fix jdk1.4 test-tree compile breaks left by unrelated recent commits (SM9 Destroyable, a PKIXRevocationChecker test, an EST import pulled into ParseTest, String.contains in PBETest, a stale PKIXCertPathReviewer test reference, and two getDeclaredMethod varargs call sites) so build-test compiles and the full jdk1.4 suite runs again.
David Hook
More... 4 months ago
Merge branch 'main' into sm9-keyexchange
gefeili
More... 4 months ago
Merge branch 'main' into sm9-keyexchange
gefeili
More... 4 months ago
Merge branch 'sm9-generate-user-key' into 'main'
David Hook
More... 4 months ago
Merge branch 'sm9-generate-user-key' into 'main'
David Hook
More... 4 months ago
SM9: rename the master-key user-derivation method generatePrivateKey ->...
Gefei Li
More... 4 months ago
SM9: rename the master-key user-derivation method generatePrivateKey ->...
Gefei Li
More... 4 months ago
Merge branch 'main' of gitlab.cryptoworkshop.com:root/bc-java
David Hook
More... 4 months ago
Merge branch 'main' of gitlab.cryptoworkshop.com:root/bc-java
David Hook
More... 4 months ago
PKIX: deprecate the org.bouncycastle.jce.exception package (ExtException and its Ext* subclasses) - a pre-1.4 cause-chaining shim obsolete on the supported runtimes - and migrate the provider cert-path and X.509 generator code to the standard java.security.cert exceptions, adding SecurityExceptions.certPathValidatorException / certPathBuilderException / certificateEncodingException factories for the Java-1.4-safe cause attach. Messages and CertPathValidatorException certPath/index unchanged.
David Hook
More... 4 months ago
PKIX: deprecate the org.bouncycastle.jce.exception package (ExtException and its Ext* subclasses) - a pre-1.4 cause-chaining shim obsolete on the supported runtimes - and migrate the provider cert-path and X.509 generator code to the standard java.security.cert exceptions, adding SecurityExceptions.certPathValidatorException / certPathBuilderException / certificateEncodingException factories for the Java-1.4-safe cause attach. Messages and CertPathValidatorException certPath/index unchanged.
David Hook
More... 4 months ago
PKIX: single-source the RFC 5280 valid-policy-tree node and its tree helpers in the new public org.bouncycastle.jcajce.PKIXPolicyNode / PKIXPolicyTreeUtil; the provider validator, provider reviewer and PKIX reviewer now share them, with org.bouncycastle.jce.provider.PKIXPolicyNode kept as a compatibility subclass. Gradle build only; legacy Ant overlays are synced separately. Behaviour unchanged.
David Hook
More... 4 months ago
PKIX: single-source the RFC 5280 valid-policy-tree node and its tree helpers in the new public org.bouncycastle.jcajce.PKIXPolicyNode / PKIXPolicyTreeUtil; the provider validator, provider reviewer and PKIX reviewer now share them, with org.bouncycastle.jce.provider.PKIXPolicyNode kept as a compatibility subclass. Gradle build only; legacy Ant overlays are synced separately. Behaviour unchanged.
David Hook
More... 4 months ago
SM9: derive the encryption recipient key in core and seal its constructor
Gefei Li
More... 4 months ago
Merge branch 'sm9-enc-pubkey-factory' into 'main'
Gefei Li
More... 4 months ago
SM9: derive the encryption recipient key in core and seal its constructor
Gefei Li
More... 4 months ago
Merge branch 'sm9-enc-pubkey-factory' into 'main'
Gefei Li
More... 4 months ago
PKIX: PKIXPolicyNode.copy() now re-parents cloned children in the base prov copy, matching the pkix copy and prov's own jdk1.1/jdk1.3 overlays - the base was the outlier, losing child parents (latent: copy() has no live caller on the validation path), and the stale TODO noting it is removed.
David Hook
More... 4 months ago
PKIX: PKIXPolicyNode.copy() now re-parents cloned children in the base prov copy, matching the pkix copy and prov's own jdk1.1/jdk1.3 overlays - the base was the outlier, losing child parents (latent: copy() has no live caller on the validation path), and the stale TODO noting it is removed.
David Hook
More... 4 months ago
PKIX: guard the attacker-controlled CRL entry reasonCode against the reason table in the legacy x509 PKIXCertPathReviewer, matching the pkix reviewer - an out-of-range or beyond-int value now degrades to "unknown" rather than escaping as ArrayIndexOutOfBoundsException / ArithmeticException.
David Hook
More... 4 months ago
PKIX: guard the attacker-controlled CRL entry reasonCode against the reason table in the legacy x509 PKIXCertPathReviewer, matching the pkix reviewer - an out-of-range or beyond-int value now degrades to "unknown" rather than escaping as ArrayIndexOutOfBoundsException / ArithmeticException.
David Hook
More... 4 months ago
Updated the Claude guidance: record the asn1.x509 shared pure-ASN.1 validator pattern for cert-path logic used by more than one stack.
David Hook
More... 4 months ago
PKIX: reconcile the four drifted getCertStatus copies - the pkix revocation path now rejects CRL entries with unsupported critical extensions (RFC 5280 sec. 6.3), the legacy x509 copy fails closed on an unparseable indirect-CRL certificateIssuer, the two pkix copies collapse into one, and the sec. 6.3.3 (i)/(j) revocation-effectiveness rule is single-sourced in PKIXCRLValidator.isRevocationEffective.
David Hook
More... 4 months ago
PKIX: reconcile the four drifted getCertStatus copies - the pkix revocation path now rejects CRL entries with unsupported critical extensions (RFC 5280 sec. 6.3), the legacy x509 copy fails closed on an unparseable indirect-CRL certificateIssuer, the two pkix copies collapse into one, and the sec. 6.3.3 (i)/(j) revocation-effectiveness rule is single-sourced in PKIXCRLValidator.isRevocationEffective.
David Hook
More... 4 months ago
Updated the Claude guidance: record the asn1.x509 shared pure-ASN.1 validator pattern for cert-path logic used by more than one stack.
David Hook
More... 4 months ago
PKIX: single-source the RFC 5280 sec. 6.3.3 CRL scope rules in the new org.bouncycastle.asn1.x509.PKIXCRLValidator - a pure-ASN.1 companion to PKIXNameConstraintValidator - with both RFC3280CertPathUtilities implementations delegating to it; behaviour and exception messages unchanged.
David Hook
More... 4 months ago
PKIX: single-source the RFC 5280 sec. 6.3.3 CRL scope rules in the new org.bouncycastle.asn1.x509.PKIXCRLValidator - a pure-ASN.1 companion to PKIXNameConstraintValidator - with both RFC3280CertPathUtilities implementations delegating to it; behaviour and exception messages unchanged.
David Hook
More... 4 months ago
PKIX: add regression tests pinning the corrected ReasonsMask.hasNewReasons semantics in both the prov and pkix copies, with legacy-build excludes for the package-private pkix.jcajce test, and release-note the ReasonsMask fixes.
David Hook
More... 4 months ago