BouncyCastle update to > 1.68

[nils-ohlmeier]

We attempted an update from BouncyCastle 1.68 to version 1.70, but had to revert back to 1.68 because of a new issue in BouncyCastle >= 1.69, which prevents the media path between the JVB and Jigasi getting established (see #1878 for details).

We created an issue on the BouncyCastle end bcgit/bc-java#1159 to get this resolved.

This ticket is mostly for keeping track of this blocker and update once the issue is fixed on the BouncyCastle side.

Note: a possible alternative is that once Jitsi Desktop is updated to support DTLS 1.2 and is used/available for Jigasi we could probably switch to a recent version of BouncyCastle as well, as the issue above only affects DTLS 1.0 clients.

[Neustradamus]

@nils-ohlmeier: It has been fixed by #1884?

[Neustradamus]

@nils-ohlmeier: What is the status of this ticket?

• https://github.com/jitsi/jitsi-videobridge
• https://github.com/jitsi/jitsi-videobridge/blob/master/pom.xml
• https://github.com/jitsi/jitsi-videobridge/blob/master/jitsi-media-transform/pom.xml
• Bump Bouncycastle to version 1.75. #2036
• Cleanup DTLS 1.0 leftovers #1983
• fix: Bumps jitsi-media-transform, BC 1.70 and fix support for DTLS 1.0. #1884
• BouncyCastle update to > 1.68 #1881
• DTLS 1.2/DTLS server role support/BC 1.61 #806
• Update bcprov-jdk15on to 1.54 #123

Linked to:

• CVE fixes? jitsi#745

[bgrozev]

The current version of bouncycastle is 1.75

[Neustradamus]

@bgrozev: Thanks for your message, it is possible to update to 1.76?

All current Bouncy Castle 1.75 version repositories and do not forget others which old:

• https://github.com/jitsi/moderated-meetings
• https://github.com/jitsi/otr4j
• https://github.com/jitsi/zrtp4j