Bug#1019488: bouncycastle: incomplete information in the manifest files

Sudip Mukherjee sudipm.mukherjee at gmail.com
Sat Sep 10 13:09:06 BST 2022


Source: bouncycastle
Version: 1.71-1
Severity: important
X-Debbugs-Cc: sudipm.mukherjee at gmail.com

Dear Maintainer,

The META-INF/MANIFEST.MF file of libbcpg-java contains only the following:

Manifest-Version: 1.0
Ant-Version: Apache Ant 1.10.12
Application-Library-Allowable-Codebase: *
Application-Name: Bouncy Castle OpenPGP API
Automatic-Module-Name: org.bouncycastle.pg
Caller-Allowable-Codebase: *
Class-Path: bcprov.jar
Codebase: *
Created-By: 11.0.15+10-post-Debian-1 (Debian)
Extension-Name: org.bouncycastle.bcpg
Implementation-Vendor: BouncyCastle.org
Implementation-Vendor-Id: org.bouncycastle
Implementation-Version: 1.71.00.0
Permissions: all-permissions
Specification-Vendor: BouncyCastle.org
Specification-Version: 1.1
Trusted-Library: true

Which is incomplete and does not contain all the other required information
like Bundle-Version, Bundle-Name, Export-Package etc. And this lack of information
makes the package unusable when using a SimpleConfigurator based bundles.info file.

But if I see the jar file in the maven repository I can see the manifest file in that
contains all the required information. The jar can be found at:
https://repo1.maven.org/maven2/org/bouncycastle/bcpg-jdk18on/1.71/bcpg-jdk18on-1.71.jar


-- 
Regards
Sudip



More information about the pkg-java-maintainers mailing list