Re: CertificateFactory does not conforms to JAVA specifications
David Hook <dgh-rTAZ0PM/[email protected]> Sun, 17 Mar 2019 06:58:47 +1100
| Newsgroups | gmane.comp.encryption.bouncy-castle.devel |
|---|---|
| Organization | Crypto Workshop Pty Ltd |
| Message-ID | <[email protected]> |
Hi Massimiliano, It's on my list, it will be probably be another couple of weeks before I get to it though (there's a couple of other things on the list I have to still deal with). Apologies, David On 15/3/19 11:26 pm, Massimiliano Ziccardi wrote: > Hello guys! > > About one month ago, I opened this issue: > > * https://github.com/bcgit/bc-java/issues/457 - CertificateFactory > does not conforms to specifications > > And I created a PR that should solve/mitigate the issue: > > * https://github.com/bcgit/bc-java/pull/459 > > But I never received any comment. > > We already discussed this issue some year ago here > <http://bouncy-castle.1462172.n4.nabble.com/Problem-in-the-bouncycastle-CertificateFactory-implementation-td4655904.html> > > I really believe it should be fixed. As it is, it creates incoherent > results when passing from any compliant provider (Sun, IAIK, etc) to > BouncyCastle. > > Code relying to the fact that bad input should raise an exception, > could start failing with a NullPointerException if changing the > provider to BouncyCastle. > > WDYT? > > Regards, > Massimiliano