Re: BC jdk15on 1.62 incompatible with JDK 8

cryptearth <[email protected]> Tue, 6 Aug 2019 23:44:04 +0200
Newsgroups gmane.comp.encryption.bouncy-castle.devel
Message-ID <[email protected]>
Hey Paul,

well, then do obfuscation the right way: don't include your dependencies 
in the obfuscation but exclude them and obfuscate only your own code. 
ProGuard can be set up this way to exclude dependencies but only 
obfuscate the classes/jars you specify.
Also, I don't know what libs you're using, and thier licenses, but I 
guess at least some of them restrict you to modify and re-distribute the 
modified libs, or restrict obfuscation at all.
btw: As most of the libs you use likely freely available - why obfuscate 
them in the first place instead of leave them as is.
Another option: Don't stick to Java8 (think about: what's the reason 
that keeps you at this version?) but consider update to a newer version, 
wich should be for security reasons anyway. In addition: If you keep 
using an old Java version - why not use an older BC version like 1.59? 
Bet you wont have issues with that.

Matt

Am 06.08.2019 um 23:26 schrieb Mondain:
> Its a breaking change when the bytecode / class version is set at 53.0 
> and one is compiling with proguard enabled with JDK 8. I'd like to 
> avoid hacky workarounds such as modifying a dependency jar during the 
> build process.
>
> Regards,
> Paul
>
> On Tue, Aug 6, 2019 at 12:41 PM cryptearth <[email protected] 
> <mailto:[email protected]>> wrote:
>
>     Hey Paul,
>
>     Project Jigsaw (module system) was introduced with Java 9 to build
>     smaller footprint runtimes by only provide what's needed to
>     execute. As any version below 9 just doesn't access the data you
>     noted it would be no problem. You can try to just remove it - but
>     I guess this might break the signature wich leads to the problem
>     that it can't be used anymore (some internal java security stuff).
>
>     Matt
>
>     Am 06.08.2019 um 21:35 schrieb Mondain:
>>     I got this in a build earlier today where its reporting a class
>>     in the bcpkix-jdk15on jar having been built with JDK 9.
>>
>>      [proguard] java.io.IOException: Can't read
>>     [/home/mondain/.m2/repo/org/bouncycastle/bcpkix-jdk15on/1.62/bcpkix-jdk15on-1.62.jar]
>>     (Can't process class [META-INF/versions/9/module-info.class]
>>     (Unsupported class version number [53.0] (maximum 52.0, Java 1.8)))
>>
>>     Is there somewhere that I should post an issue report? or could I
>>     be mistaken here?
>>
>>     Regards,
>>     Paul
>>     -- 
>>     http://gregoire.org/
>>     https://github.com/Red5 <http://code.google.com/p/red5/>
>
>
>
> -- 
> http://gregoire.org/
> https://github.com/Red5 <http://code.google.com/p/red5/>