Skip to main content

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [List Home]
[orbit-dev] JSch 0.1.28 Cryptography warning

Hi all,
 
A kind reviewer noticed while reviewing Orbit:
 
5.        Jcraft.jsch 0.1.28 does not contain the same Cryptography warning as the other versions.  Is that because it does not contain the same encryption methods? 
I have some questions about this:
  • Version 0.1.28 is really legacy (from the 3.2 / Callisto Stream!), 0.1.31 was used in Europa and 0.1.37 is now current in Ganymede) .
    That being said, do we even bother about his observation? Would we want to remove JSch 0.1.28 from the Orbit ZIP just to be on the safe side? How would we do that? I'd think that if we do not release 0.1.28 any more we'd not need to bother any more... have we ever "obsoleted" a bundle from Orbit before? Is this something we want to do?
  • Atsuhiko, what do you think about this observation?
Cheers,
--
Martin Oberhuber, Senior Member of Technical Staff, Wind River
Target Management Project Lead, DSDP PMC Member
http://www.eclipse.org/dsdp/tm
_______________________________________________
orbit-dev mailing list
orbit-dev@xxxxxxxxxxx
https://dev.eclipse.org/mailman/listinfo/orbit-dev

Back to the top