inconsistent pom file relocation

[Thibault Kruse]

Hi,
it seems the pom files generated for bcprov and bctsp are do not
indicate the relocation to new versions.

E.g. compare:
http://central.maven.org/maven2/bouncycastle/bctsp-jdk14/138/bctsp-jdk14-138.pom
http://central.maven.org/maven2/bouncycastle/bcprov-jdk14/138/bcprov-jdk14-138.pom

As a result, e.g. in gradle, I get this:

build.gradle:

apply plugin: 'java'
repositories {
jcenter()
}

dependencies {
compile 'bouncycastle:bctsp-jdk14:138'
compile 'bouncycastle:bcmail-jdk14:138'
compile 'bouncycastle:bcprov-jdk14:138'
}

$ gradle dependencies
:dependencies
compile - Compile classpath for source set 'main'.
+--- bouncycastle:bctsp-jdk14:138
| \--- org.bouncycastle:bctsp-jdk14:1.38
| +--- org.bouncycastle:bcprov-jdk14:1.38
| \--- org.bouncycastle:bcmail-jdk14:1.38
| \--- org.bouncycastle:bcprov-jdk14:1.38
+--- bouncycastle:bcmail-jdk14:138
\--- bouncycastle:bcprov-jdk14:138

This also causes jars to be included in as duplicates (138 and 1.38).
A consistent approach for the POMs would be preferrable.

[David Hook]

There's actually two issues, neither of which are in the email below.

http://central.maven.org/maven2/org/bouncycastle/

is the BC maven root, I've no idea who or what set up the other one.
Don't use it, use the BC one.

The second is BC is now at 1.51, 1.38 came out years ago. Don't use it
either.

Regards,

David

Post by Thibault Kruse
Hi,
it seems the pom files generated for bcprov and bctsp are do not
indicate the relocation to new versions.
http://central.maven.org/maven2/bouncycastle/bctsp-jdk14/138/bctsp-jdk14-138.pom
http://central.maven.org/maven2/bouncycastle/bcprov-jdk14/138/bcprov-jdk14-138.pom
apply plugin: 'java'
repositories {
jcenter()
}
dependencies {
compile 'bouncycastle:bctsp-jdk14:138'
compile 'bouncycastle:bcmail-jdk14:138'
compile 'bouncycastle:bcprov-jdk14:138'
}
$ gradle dependencies
:dependencies
compile - Compile classpath for source set 'main'.
+--- bouncycastle:bctsp-jdk14:138
| \--- org.bouncycastle:bctsp-jdk14:1.38
| +--- org.bouncycastle:bcprov-jdk14:1.38
| \--- org.bouncycastle:bcmail-jdk14:1.38
| \--- org.bouncycastle:bcprov-jdk14:1.38
+--- bouncycastle:bcmail-jdk14:138
\--- bouncycastle:bcprov-jdk14:138
This also causes jars to be included in as duplicates (138 and 1.38).
A consistent approach for the POMs would be preferrable.