From: PJ Fanning <fanningpj@apache.org>
Date: Mon, 31 Jul 2023 14:55:12 +0000 (+0000)
Subject: bouncycastle 1.76
X-Git-Tag: REL_5_2_4~112
X-Git-Url: https://source.dussan.org/?a=commitdiff_plain;h=842e12d06e3446fa2000eee8c6fc270088081123;p=poi.git

bouncycastle 1.76

git-svn-id: https://svn.apache.org/repos/asf/poi/trunk@1911371 13f79535-47bb-0310-9956-ffa450edef68
---

diff --git a/build.gradle b/build.gradle
index 0bd8bf1e1a..4447d8a69e 100644
--- a/build.gradle
+++ b/build.gradle
@@ -117,7 +117,7 @@ subprojects {
     apply plugin: 'com.adarshr.test-logger'
 
     ext {
-        bouncyCastleVersion = '1.75'
+        bouncyCastleVersion = '1.76'
         commonsCodecVersion = '1.16.0'
         commonsCompressVersion = '1.23.0'
         commonsIoVersion = '2.13.0'
diff --git a/build.xml b/build.xml
index a95153a2b4..8d9602e19f 100644
--- a/build.xml
+++ b/build.xml
@@ -296,11 +296,11 @@ under the License.
 
     <!-- xml signature libs - not part of the distribution -->
     <dependency prefix="dsig.xmlsec" artifact="org.apache.santuario:xmlsec:3.0.2" usage="ooxml-provided"/>
-    <dependency prefix="dsig.bouncycastle-prov" artifact="org.bouncycastle:bcprov-jdk18on:1.75" usage="ooxml-provided"/>
-    <dependency prefix="dsig.bouncycastle-pkix" artifact="org.bouncycastle:bcpkix-jdk18on:1.75" usage="ooxml-provided"/>
-    <dependency prefix="dsig.bouncycastle-util" artifact="org.bouncycastle:bcutil-jdk18on:1.75" usage="ooxml-provided"/>
+    <dependency prefix="dsig.bouncycastle-prov" artifact="org.bouncycastle:bcprov-jdk18on:1.76" usage="ooxml-provided"/>
+    <dependency prefix="dsig.bouncycastle-pkix" artifact="org.bouncycastle:bcpkix-jdk18on:1.76" usage="ooxml-provided"/>
+    <dependency prefix="dsig.bouncycastle-util" artifact="org.bouncycastle:bcutil-jdk18on:1.76" usage="ooxml-provided"/>
     <!-- only used for signing the release - not used with the ooxml signatures -->
-    <dependency prefix="dsig.bouncycastle-bcpg" artifact="org.bouncycastle:bcpg-jdk18on:1.75" usage="util"/>
+    <dependency prefix="dsig.bouncycastle-bcpg" artifact="org.bouncycastle:bcpg-jdk18on:1.76" usage="util"/>
     <dependency prefix="ooxml.test.stax2" artifact="org.codehaus.woodstox:stax2-api:4.2.1" usage="ooxml-provided"/>
 
     <!-- svg/batik/pdf libs - not part of the distribution - move batik to its own directory because of JPMS module-path issues -->
diff --git a/osgi/README.md b/osgi/README.md
index 69dd8c077f..9b46dcf726 100644
--- a/osgi/README.md
+++ b/osgi/README.md
@@ -29,7 +29,7 @@ These are required to sign or validate signed Office documents. The OSGi bundles
     
     - XML Commons Resolver: https://mvnrepository.com/artifact/xml-resolver/xml-resolver/1.2-osgi
     
-    - Bouncy Castle: https://mvnrepository.com/artifact/org.bouncycastle/bcprov-ext-jdk18on/1.75, https://mvnrepository.com/artifact/org.bouncycastle/bcpkix-jdk18on/1.75
+    - Bouncy Castle: https://mvnrepository.com/artifact/org.bouncycastle/bcprov-ext-jdk18on/1.76, https://mvnrepository.com/artifact/org.bouncycastle/bcpkix-jdk18on/1.76
 4. PDFBox and PDFBox Graphics2D  
 Required to render to PDF documents.
 The required jars can be downloaded from:
diff --git a/poi-ooxml/src/main/java/org/apache/poi/poifs/crypt/dsig/SignatureInfo.java b/poi-ooxml/src/main/java/org/apache/poi/poifs/crypt/dsig/SignatureInfo.java
index 1f8ec84516..b513c15ef9 100644
--- a/poi-ooxml/src/main/java/org/apache/poi/poifs/crypt/dsig/SignatureInfo.java
+++ b/poi-ooxml/src/main/java/org/apache/poi/poifs/crypt/dsig/SignatureInfo.java
@@ -153,7 +153,7 @@ import org.w3c.dom.events.MutationEvent;
  * <p>To use SignatureInfo and its sibling classes, you'll need to have the following libs
  * in the classpath:</p>
  * <ul>
- * <li>BouncyCastle bcpkix and bcprov (tested against 1.75)</li>
+ * <li>BouncyCastle bcpkix and bcprov (tested against 1.76)</li>
  * <li>Apache Santuario "xmlsec" (tested against 3.0.2)</li>
  * <li>and log4j-api (tested against 2.20.x)</li>
  * </ul>