Deprecated API

Contents

• Classes
• Fields
• Methods
• Constructors

Deprecated Classes

Class	Description
org.bouncycastle.tls.BulkCipherAlgorithm	Will be removed.
org.bouncycastle.tls.ECBasisType	Will be removed.

Deprecated Fields

Field	Description
org.bouncycastle.tls.NamedGroup.OQS_mlkem1024	Experimental API (unstable): unofficial value from Open Quantum Safe project.
org.bouncycastle.tls.NamedGroup.OQS_mlkem512	Experimental API (unstable): unofficial value from Open Quantum Safe project.
org.bouncycastle.tls.NamedGroup.OQS_mlkem768	Experimental API (unstable): unofficial value from Open Quantum Safe project.

Deprecated Methods

Method	Description
org.bouncycastle.jsse.util.URLConnectionUtil.openInputStream(URL)	Use URLConnectionUtil.openStream(URL) instead
org.bouncycastle.tls.AbstractTlsServer.checkServerExtensions()	Use 'serverExtensions' directly, it is now never null
org.bouncycastle.tls.Certificate.parse(TlsContext, InputStream, OutputStream)	Use version taking a Certificate.ParseOptions argument instead.
org.bouncycastle.tls.ClientHello.getClientVersion()	Use ClientHello.getVersion() instead.
org.bouncycastle.tls.DTLSProtocol.evaluateMaxFragmentLengthExtension(boolean, Hashtable, Hashtable, short)	Will be removed.
org.bouncycastle.tls.RecordPreview.getApplicationDataLimit()	Use RecordPreview.getContentLimit() instead
org.bouncycastle.tls.SecurityParameters.getCompressionAlgorithm()	Will be removed. Use constant CompressionMethod._null instead.
org.bouncycastle.tls.SecurityParameters.getPrfAlgorithm()	Use SecurityParameters.getPRFAlgorithm() instead.
org.bouncycastle.tls.SignatureScheme.getRSAPSSCryptoHashAlgorithm(int)	Use SignatureScheme.getCryptoHashAlgorithm(int) instead.
org.bouncycastle.tls.TlsExtensionsUtils.getClientCertificateTypeExtensionServer(Hashtable, short)	Use version without defaultValue instead
org.bouncycastle.tls.TlsExtensionsUtils.getServerCertificateTypeExtensionServer(Hashtable, short)	Use version without defaultValue instead
org.bouncycastle.tls.TlsPeer.shouldCheckSigAlgOfPeerCerts()	No longer called by the protocol classes. Can call TlsUtils.checkPeerSigAlgs(TlsContext, TlsCertificate[]) once a complete CertPath has been determined (i.e. as part of chain validation).
org.bouncycastle.tls.TlsProtocol.processMaxFragmentLengthExtension(Hashtable, Hashtable, short)	Will be removed.
org.bouncycastle.tls.TlsRSAUtils.generateEncryptedPreMasterSecret(TlsContext, TlsCertificate, OutputStream)	Use TlsUtils.generateEncryptedPreMasterSecret(TlsContext, TlsEncryptor, OutputStream) instead.
org.bouncycastle.tls.TlsUtils.getSignatureAndHashAlgorithm(TlsContext, TlsCredentialedSigner)	Will be removed
org.bouncycastle.tls.TlsUtils.getSupportedCipherSuites(TlsCrypto, int[], int)	Use TlsUtils.getSupportedCipherSuites(TlsCrypto, int[], int, int) instead.
org.bouncycastle.tls.TlsUtils.isValidCipherSuiteForVersion(int, ProtocolVersion)	Use TlsUtils.isValidVersionForCipherSuite(int, ProtocolVersion) instead.
org.bouncycastle.tls.TlsUtils.PRF(TlsContext, TlsSecret, String, byte[], int)	Use TlsUtils.PRF(SecurityParameters, TlsSecret, String, byte[], int) instead.
org.bouncycastle.tls.TlsUtils.readDERObject(byte[])	Will be removed. Use readASN1Object in combination with requireDEREncoding instead

Deprecated Constructors

Constructor	Description
org.bouncycastle.tls.crypto.impl.bc.BcTlsRSASigner(BcTlsCrypto, RSAKeyParameters, RSAKeyParameters)	Use constructor without 'publicKey' parameter.
org.bouncycastle.tls.crypto.impl.jcajce.JcaTlsRSASigner(JcaTlsCrypto, PrivateKey, PublicKey)	Use constructor without 'publicKey' parameter.
org.bouncycastle.tls.crypto.impl.TlsAEADCipher(TlsCryptoParameters, TlsAEADCipherImpl, TlsAEADCipherImpl, int, int, int)	Use version with extra 'nonceGeneratorFactory' parameter