Top Deprecated
Bouncy Castle TLS/JSSE APIs (FIPS Distribution) 1.0.19

Deprecated API

No API in this release is deprecated for removal.

Deprecated Item Summary

SinceDeprecated Item and Description
org.bouncycastle.jsse.provider.ExportSSLSession_5.getPeerCertificateChain()

Deprecated as a consequence of X509Certificate being deprecated. See corresponding docs for further information.

org.bouncycastle.jsse.provider.ExportSSLSession_7.getPeerCertificateChain()

Deprecated as a consequence of X509Certificate being deprecated. See corresponding docs for further information.

org.bouncycastle.jsse.provider.ImportSSLSession_5.getPeerCertificateChain()

Deprecated as a consequence of X509Certificate being deprecated. See corresponding docs for further information.

org.bouncycastle.jsse.provider.ImportSSLSession_7.getPeerCertificateChain()

Deprecated as a consequence of X509Certificate being deprecated. See corresponding docs for further information.

org.bouncycastle.jsse.provider.OldCertUtil.X509CertificateWrapper

Deprecated as a consequence of X509Certificate being deprecated. See corresponding docs for further information.

org.bouncycastle.jsse.provider.OldCertUtil.getPeerCertificateChain(BCExtendedSSLSession sslSession)

Deprecated as a consequence of X509Certificate being deprecated. See corresponding docs for further information.

org.bouncycastle.jsse.provider.ProvExtendedSSLSession_7.getPeerCertificateChain()

Deprecated as a consequence of X509Certificate being deprecated. See corresponding docs for further information.

org.bouncycastle.jsse.provider.ProvSSLSessionBase.getPeerCertificateChain()

Deprecated as a consequence of X509Certificate being deprecated. See corresponding docs for further information.

org.bouncycastle.jsse.util.URLConnectionUtil.openInputStream(URL url)

Use openStream(URL) instead

org.bouncycastle.tls.AbstractTlsServer.checkServerExtensions()

Use 'serverExtensions' directly, it is now never null

org.bouncycastle.tls.BulkCipherAlgorithm

Will be removed.

Returns:

a Certificate object.
org.bouncycastle.tls.Certificate.parse(TlsContext
the TlsContext of the current connection.
context, InputStream
the InputStream to parse from.
messageInput, OutputStream
the OutputStream to write the "end point hash" (or null).
endPointHashOutput)

Use version taking a ParseOptions argument instead.

org.bouncycastle.tls.ClientHello.getClientVersion()

Use getVersion() instead.

org.bouncycastle.tls.DTLSProtocol.evaluateMaxFragmentLengthExtension(boolean resumedSession, Hashtable<K, V> clientExtensions, Hashtable<K, V> serverExtensions, short alertDescription)

Will be removed.

org.bouncycastle.tls.ECBasisType

Will be removed.

org.bouncycastle.tls.RecordPreview.getApplicationDataLimit()

Use getContentLimit instead

Returns:

CompressionMethod
org.bouncycastle.tls.SecurityParameters.getCompressionAlgorithm()

Will be removed. Use constant CompressionMethod._null instead.

org.bouncycastle.tls.SecurityParameters.getPrfAlgorithm()

Use getPRFAlgorithm() instead.

org.bouncycastle.tls.SignatureScheme.getRSAPSSCryptoHashAlgorithm(int signatureScheme)

Use getCryptoHashAlgorithm(int) instead.

org.bouncycastle.tls.TlsExtensionsUtils.getClientCertificateTypeExtensionServer(Hashtable<K, V> extensions, short defaultValue)

Use version without defaultValue instead

org.bouncycastle.tls.TlsExtensionsUtils.getServerCertificateTypeExtensionServer(Hashtable<K, V> extensions, short defaultValue)

Use version without defaultValue instead

Returns:

true if the 'signatureAlgorithm' of received certificates should be checked, or false to skip those checks.
org.bouncycastle.tls.TlsPeer.shouldCheckSigAlgOfPeerCerts()

No longer called by the protocol classes. Can call TlsUtils#checkPeerSigAlgs(TlsContext, TlsCertificate[]) once a complete CertPath has been determined (i.e. as part of chain validation).

org.bouncycastle.tls.TlsProtocol.processMaxFragmentLengthExtension(Hashtable<K, V> clientExtensions, Hashtable<K, V> serverExtensions, short alertDescription)

Will be removed.

org.bouncycastle.tls.TlsRSAUtils.generateEncryptedPreMasterSecret(TlsContext context, TlsCertificate certificate, OutputStream output)

Use TlsUtils#generateEncryptedPreMasterSecret(TlsContext, TlsEncryptor, OutputStream) instead.

org.bouncycastle.tls.TlsUtils.PRF(TlsContext context, TlsSecret secret, String asciiLabel, byte[] seed, int length)

Use PRF(SecurityParameters, TlsSecret, String, byte[], int) instead.

org.bouncycastle.tls.TlsUtils.getSignatureAndHashAlgorithm(TlsContext context, TlsCredentialedSigner signerCredentials)

Will be removed

org.bouncycastle.tls.TlsUtils.getSupportedCipherSuites(TlsCrypto crypto, int[] suites, int suitesCount)

Use getSupportedCipherSuites(TlsCrypto, int[], int, int) instead.

org.bouncycastle.tls.TlsUtils.isValidCipherSuiteForVersion(int cipherSuite, ProtocolVersion version)

Use isValidVersionForCipherSuite(int, ProtocolVersion) instead.

org.bouncycastle.tls.TlsUtils.readDERObject(byte[] encoding)

Will be removed. Use readASN1Object in combination with requireDEREncoding instead