-
New Feature
-
Resolution: Unresolved
-
Minor
-
None
-
Jenkins 2.492.2
Apache Mina SSHD API plugin 2.14.0-143.v2b_362fc39576
Paraphrased from basil in a GitHub comment
Remove the mina-sshd-api-common's optional plugin-to-plugin dependency on the eddsa-api plugin, leaving behind only the optional plugin-to-plugin dependency on bouncycastle-api. When both Bouncy Castle and EdDSA-Java are on the classpath, the latter is preferred; but only the former is FIPS compliant — hence the desirability of making this change
The change will migrate from EdDSA-Java to BouncyCastle at runtime.
Automated tests should be run in plugin BOM and acceptance test harness. Manual testing should also be run, including the type of testing that was performed by allan_burdajewicz as described in a GitHub comment.