Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-75498

Remove optional eddsa-api dependency from Apache Mina SSHD API plugin

XMLWordPrintable

    • Icon: New Feature New Feature
    • Resolution: Unresolved
    • Icon: Minor Minor
    • mina-sshd-api-plugin
    • None
    • Jenkins 2.492.2
      Apache Mina SSHD API plugin 2.14.0-143.v2b_362fc39576

      Paraphrased from basil in a GitHub comment

      Remove the mina-sshd-api-common's optional plugin-to-plugin dependency on the eddsa-api plugin, leaving behind only the optional plugin-to-plugin dependency on bouncycastle-api. When both Bouncy Castle and EdDSA-Java are on the classpath, the latter is preferred; but only the former is FIPS compliant — hence the desirability of making this change

      The change will migrate from EdDSA-Java to BouncyCastle at runtime.

      Automated tests should be run in plugin BOM and acceptance test harness. Manual testing should also be run, including the type of testing that was performed by allan_burdajewicz as described in a GitHub comment.

            allan_burdajewicz Allan BURDAJEWICZ
            markewaite Mark Waite
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

              Created:
              Updated: