Deprecated API

Contents

• Deprecated Fields
• Deprecated Methods
• Deprecated Constructors

Deprecated Fields

Field and Description
org.bouncycastle.tls.NamedGroup.OQS_mlkem1024 Experimental API (unstable): unofficial value from Open Quantum Safe project.
org.bouncycastle.tls.NamedGroup.OQS_mlkem512 Experimental API (unstable): unofficial value from Open Quantum Safe project.
org.bouncycastle.tls.NamedGroup.OQS_mlkem768 Experimental API (unstable): unofficial value from Open Quantum Safe project.

Deprecated Methods

Method and Description
org.bouncycastle.tls.AbstractTlsServer.checkServerExtensions() Use 'serverExtensions' directly, it is now never null
org.bouncycastle.tls.DTLSProtocol.evaluateMaxFragmentLengthExtension(boolean, Hashtable, Hashtable, short) Will be removed.
org.bouncycastle.tls.TlsExtensionsUtils.getClientCertificateTypeExtensionServer(Hashtable, short) Use version without defaultValue instead
org.bouncycastle.tls.SessionParameters.getCompressionAlgorithm() field value meaningless.
org.bouncycastle.tls.SecurityParameters.getCompressionAlgorithm() Will be removed. Use constant CompressionMethod._null instead.
org.bouncycastle.tls.TlsUtils.getHashAlgorithmForPRFAlgorithm(int) Will be removed. TlsCryptoUtils.getHashForPRF(int) should be a useful alternative.
org.bouncycastle.tls.SecurityParameters.getPrfAlgorithm() Use SecurityParameters.getPRFAlgorithm() instead.
org.bouncycastle.tls.SecurityParameters.getPRFHashAlgorithm() Use SecurityParameters.getPRFCryptoHashAlgorithm() instead.
org.bouncycastle.tls.SignatureScheme.getRSAPSSCryptoHashAlgorithm(int) Use SignatureScheme.getCryptoHashAlgorithm(int) instead.
org.bouncycastle.tls.TlsExtensionsUtils.getServerCertificateTypeExtensionServer(Hashtable, short) Use version without defaultValue instead
org.bouncycastle.tls.TlsUtils.getSignatureAndHashAlgorithm(TlsContext, TlsCredentialedSigner) Will be removed
org.bouncycastle.tls.TlsUtils.getSupportedCipherSuites(TlsCrypto, int[], int) Use TlsUtils.getSupportedCipherSuites(TlsCrypto, int[], int, int) instead.
org.bouncycastle.tls.TlsUtils.isValidCipherSuiteForVersion(int, ProtocolVersion) Use TlsUtils.isValidVersionForCipherSuite(int, ProtocolVersion) instead.
org.bouncycastle.jsse.util.URLConnectionUtil.openInputStream(URL) Use openStream(URL) instead
org.bouncycastle.tls.TlsUtils.PRF(TlsContext, TlsSecret, String, byte[], int) Use TlsUtils.PRF(SecurityParameters, TlsSecret, String, byte[], int) instead.
org.bouncycastle.tls.TlsProtocol.processMaxFragmentLengthExtension(Hashtable, Hashtable, short) Will be removed.
org.bouncycastle.tls.TlsUtils.readDERObject(byte[]) Will be removed. Use readASN1Object in combination with requireDEREncoding instead
org.bouncycastle.tls.SessionParameters.Builder.setCompressionAlgorithm(short) setting now ignored.
org.bouncycastle.tls.TlsPeer.shouldCheckSigAlgOfPeerCerts() No longer called by the protocol classes. Can call TlsUtils.checkPeerSigAlgs(TlsContext, TlsCertificate[]) once a complete CertPath has been determined (i.e. as part of chain validation).

Deprecated Constructors

Constructor and Description
org.bouncycastle.tls.crypto.impl.bc.BcTlsRSASigner(BcTlsCrypto, RSAKeyParameters, RSAKeyParameters) Use constructor without 'publicKey' parameter.
org.bouncycastle.tls.crypto.impl.jcajce.JcaTlsRSASigner(JcaTlsCrypto, PrivateKey, PublicKey) Use constructor without 'publicKey' parameter.