From ed31d6f2e0e8ea079d6e8c59ca0d5a2930bb38ac Mon Sep 17 00:00:00 2001
From: Mike Jumper <mjumper@apache.org>
Date: Fri, 6 Oct 2023 12:17:15 -0700
Subject: [PATCH] GUACAMOLE-839: Force usage of non-dynamic version of Bouncy
 Castle FIPS.

---
 .../modules/guacamole-auth-sso-ssl/pom.xml    | 19 +++++++++++++++++++
 1 file changed, 19 insertions(+)

diff --git a/extensions/guacamole-auth-sso/modules/guacamole-auth-sso-ssl/pom.xml b/extensions/guacamole-auth-sso/modules/guacamole-auth-sso-ssl/pom.xml
index 2f705eae7..945be98c4 100644
--- a/extensions/guacamole-auth-sso/modules/guacamole-auth-sso-ssl/pom.xml
+++ b/extensions/guacamole-auth-sso/modules/guacamole-auth-sso-ssl/pom.xml
@@ -124,6 +124,25 @@
             <groupId>org.bouncycastle</groupId>
             <artifactId>bcpkix-fips</artifactId>
             <version>1.0.7</version>
+
+            <!-- Force usage of known version of bc-fips, rather than a future
+            unknown version (bcpkix-fips references bc-fips using a version
+            range, resulting in newer versions getting pulled in automatically,
+            breaking the automated license check) -->
+            <exclusions>
+                <exclusion>
+                    <groupId>org.bouncycastle</groupId>
+                    <artifactId>bc-fips</artifactId>
+                </exclusion>
+            </exclusions>
+
+        </dependency>
+
+        <!-- Force usage of known version of bc-fips (see bcpkix-fips above) -->
+        <dependency>
+            <groupId>org.bouncycastle</groupId>
+            <artifactId>bc-fips</artifactId>
+            <version>1.0.2.4</version>
         </dependency>
 
     </dependencies>