[ofbiz-framework] branch trunk updated: Fixed: itext is conflicting with org.apache.sshd (OFBIZ-12681)

[jl...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

jleroux pushed a commit to branch trunk
in repository https://gitbox.apache.org/repos/asf/ofbiz-framework.git


The following commit(s) were added to refs/heads/trunk by this push:
     new acba2eeaac Fixed: itext is conflicting with org.apache.sshd (OFBIZ-12681)
acba2eeaac is described below

commit acba2eeaaca3719b657c715edd3023d1f6f5554f
Author: Jacques Le Roux <ja...@les7arts.com>
AuthorDate: Thu Nov 10 10:32:02 2022 +0100

    Fixed: itext is conflicting with org.apache.sshd (OFBIZ-12681)
    
    The recent update to org.apache.sshd 2.8.0 is causing conflicts with the
    bouncycastle version imported by itext 2.1.7.  This conflict is causing the
    following failure when trying to start OFBiz from the command line:
    
    $ java.exe -jar build/libs/ofbiz.jar --start
    Config.java using configuration file start.properties
    Set OFBIZ_HOME to - D:\Martin\git\ofbiz-framework-asf
    Exception in thread "main" java.util.ServiceConfigurationError:
    java.nio.file.spi.FileSystemProvider:
    Provider org.apache.sshd.client.subsystem.sftp.SftpFileSystemProvider
    could not be instantiated
    
    Caused by: java.lang.SecurityException:
    class "org.bouncycastle.crypto.prng.VMPCRandomGenerator"'s signer information
    does not match signer information of other classes in the same package
            at java.lang.ClassLoader.checkCerts(ClassLoader.java:891)
    
    Thanks: Stephen Davidson for report, Chatree Srichart for the patch
---
 build.gradle | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/build.gradle b/build.gradle
index c2e386b137..af9defa78a 100644
--- a/build.gradle
+++ b/build.gradle
@@ -207,7 +207,11 @@ dependencies {
     implementation 'com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer:20220608.1'
     implementation 'com.googlecode.libphonenumber:libphonenumber:8.12.57'
     implementation 'com.ibm.icu:icu4j:72.1'
-    implementation 'com.lowagie:itext:2.1.7' // Don't update due to license change in newer versions, see OFBIZ-10455
+    implementation ('com.lowagie:itext:2.1.7') { // Don't update due to license change in newer versions, see OFBIZ-10455
+        exclude  group: 'bouncycastle', module: 'bcmail-jdk14'
+        exclude  group: 'bouncycastle', module: 'bcprov-jdk14'
+        exclude  group: 'bouncycastle', module: 'bctsp-jdk14'
+    }
     implementation 'com.sun.mail:javax.mail:1.6.2'
     implementation 'com.rometools:rome:1.18.0'
     implementation 'com.thoughtworks.xstream:xstream:1.4.19'