narupley/not-going-to-be-commons-ssl

Please upgrade bcprov-ext-jdk15on to latest

Opened this issue · 1 comments

Please upgrade the library bcprov-ext-jdk15on to latest one. version 1.60 contains known vulnerabilities.

It's causing this warning to be thrown:

WARNING: An illegal reflective access operation has occurred
WARNING: Illegal reflective access by org.bouncycastle.jcajce.provider.drbg.DRBG (file:/.m2/repository/org/bouncycastle/bcprov-ext-jdk15on/1.60/bcprov-ext-jdk15on-1.60.jar) to constructor sun.security.provider.Sun()
WARNING: Please consider reporting this to the maintainers of org.bouncycastle.jcajce.provider.drbg.DRBG
WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations
WARNING: All illegal access operations will be denied in a future release