GUACAMOLE-839: Merge forced usage of non-dynamic version of Bouncy Castle FIPS.

This commit is contained in:
James Muehlner
2023-10-06 13:56:59 -07:00
committed by GitHub

View File

@@ -124,6 +124,25 @@
<groupId>org.bouncycastle</groupId> <groupId>org.bouncycastle</groupId>
<artifactId>bcpkix-fips</artifactId> <artifactId>bcpkix-fips</artifactId>
<version>1.0.7</version> <version>1.0.7</version>
<!-- Force usage of known version of bc-fips, rather than a future
unknown version (bcpkix-fips references bc-fips using a version
range, resulting in newer versions getting pulled in automatically,
breaking the automated license check) -->
<exclusions>
<exclusion>
<groupId>org.bouncycastle</groupId>
<artifactId>bc-fips</artifactId>
</exclusion>
</exclusions>
</dependency>
<!-- Force usage of known version of bc-fips (see bcpkix-fips above) -->
<dependency>
<groupId>org.bouncycastle</groupId>
<artifactId>bc-fips</artifactId>
<version>1.0.2.4</version>
</dependency> </dependency>
</dependencies> </dependencies>