[ofbiz-framework] branch release22.01 updated: Fixed: itext is conflicting with org.apache.sshd (OFBIZ-12681)

[jl...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

jleroux pushed a commit to branch release22.01
in repository https://gitbox.apache.org/repos/asf/ofbiz-framework.git


The following commit(s) were added to refs/heads/release22.01 by this push:
     new 7cf00f5298 Fixed: itext is conflicting with org.apache.sshd (OFBIZ-12681)
7cf00f5298 is described below

commit 7cf00f52981d2fc94d3112d77d6c55739b04c4b3
Author: Jacques Le Roux <ja...@les7arts.com>
AuthorDate: Thu Nov 10 10:34:59 2022 +0100

    Fixed: itext is conflicting with org.apache.sshd (OFBIZ-12681)
    
    The recent update to org.apache.sshd 2.8.0 is causing conflicts with the
    bouncycastle version imported by itext 2.1.7.  This conflict is causing the
    following failure when trying to start OFBiz from the command line:
    
    $ java.exe -jar build/libs/ofbiz.jar --start
    Config.java using configuration file start.properties
    Set OFBIZ_HOME to - D:\Martin\git\ofbiz-framework-asf
    Exception in thread "main" java.util.ServiceConfigurationError:
    java.nio.file.spi.FileSystemProvider:
    Provider org.apache.sshd.client.subsystem.sftp.SftpFileSystemProvider
    could not be instantiated
    
    Caused by: java.lang.SecurityException:
    class "org.bouncycastle.crypto.prng.VMPCRandomGenerator"'s signer information
    does not match signer information of other classes in the same package
            at java.lang.ClassLoader.checkCerts(ClassLoader.java:891)
    
    Thanks: Stephen Davidson for report, Chatree Srichart for the patch
---
 build.gradle | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/build.gradle b/build.gradle
index 02e0b7c1aa..8ab15d76a7 100644
--- a/build.gradle
+++ b/build.gradle
@@ -200,7 +200,11 @@ dependencies {
     implementation 'com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer:20200713.1'
     implementation 'com.googlecode.libphonenumber:libphonenumber:8.12.3'
     implementation 'com.ibm.icu:icu4j:69.1'
-    implementation 'com.lowagie:itext:2.1.7' // Don't update due to license change in newer versions, see OFBIZ-10455
+    implementation ('com.lowagie:itext:2.1.7') { // Don't update due to license change in newer versions, see OFBIZ-10455
+        exclude  group: 'bouncycastle', module: 'bcmail-jdk14'
+        exclude  group: 'bouncycastle', module: 'bcprov-jdk14'
+        exclude  group: 'bouncycastle', module: 'bctsp-jdk14'
+    }
     implementation 'com.sun.mail:javax.mail:1.6.2'
     implementation 'com.rometools:rome:1.16.0'
     implementation 'com.thoughtworks.xstream:xstream:1.4.18'