OSGi wiring issue

dev support
1

I have a development server which I am about to promote to production that has ran for years. Due to the CVE issues I decided to upgrade to the 5.4.3.2 version but ran into a OSGi issue. I am using Bouncy Castle Bundle 1.72 which works with Lucee 5.3.10.120 and 5.3.12.1. I updated the Bouncy Castle Bundle to the latest which is 1.76. No issue but when I update Lucee to 5.4.0.80 or above I get a OSGi wiring issue.

Nothing else changed on the box but the Lucee version. It appears that the OSGi wiring is not reading the bundle information correctly. Instead of >=1.72 it appears to be =1.72 on the bundles.

https://www.bouncycastle.org/latest_releases.html
https://downloads.bouncycastle.org/betas/

OS: Arch Linux and Windows 10
Java Version: OpenJDK 64-Bit Server VM Eclipse Adoptium 11.0.20
Jetty Version: 10.0.11
Lucee Version: 5.4.0.80

2

Unable to resolve bcpkix [70](R 70.0): missing requirement [bcpkix [70](R 70.0)] osgi.wiring.package; (&(osgi.wiring.package=org.bouncycastle.asn1.bsi)(version>=1.72.0)) Unresolved requirements: [[bcpkix [70](R 70.0)] osgi.wiring.package; (&(osgi.wiring.package=org.bouncycastle.asn1.bsi)(version>=1.72.0))]

image
image1622×399 71.3 KB

3

Issue happens on 5.4.x or 6.0.0.519-rc