Deprecated API

Contents

• Deprecated Classes
• Deprecated Fields
• Deprecated Methods
• Deprecated Constructors

Deprecated Classes

Class and Description
org.bouncycastle.tls.BulkCipherAlgorithm Will be removed.
org.bouncycastle.tls.ECBasisType Will be removed.

Deprecated Fields

Field and Description
org.bouncycastle.tls.NamedGroup.OQS_mlkem1024 Experimental API (unstable): unofficial value from Open Quantum Safe project.
org.bouncycastle.tls.NamedGroup.OQS_mlkem512 Experimental API (unstable): unofficial value from Open Quantum Safe project.
org.bouncycastle.tls.NamedGroup.OQS_mlkem768 Experimental API (unstable): unofficial value from Open Quantum Safe project.

Deprecated Methods

Method and Description
org.bouncycastle.tls.AbstractTlsServer.checkServerExtensions() Use 'serverExtensions' directly, it is now never null
org.bouncycastle.tls.DTLSProtocol.evaluateMaxFragmentLengthExtension(boolean, Hashtable, Hashtable, short) Will be removed.
org.bouncycastle.tls.TlsRSAUtils.generateEncryptedPreMasterSecret(TlsContext, TlsCertificate, OutputStream) Use TlsUtils.generateEncryptedPreMasterSecret(TlsContext, TlsEncryptor, OutputStream) instead.
org.bouncycastle.tls.RecordPreview.getApplicationDataLimit() Use RecordPreview.getContentLimit() instead
org.bouncycastle.tls.TlsExtensionsUtils.getClientCertificateTypeExtensionServer(Hashtable, short) Use version without defaultValue instead
org.bouncycastle.tls.ClientHello.getClientVersion() Use ClientHello.getVersion() instead.
org.bouncycastle.tls.SecurityParameters.getCompressionAlgorithm() Will be removed. Use constant CompressionMethod._null instead.
org.bouncycastle.tls.SecurityParameters.getPrfAlgorithm() Use SecurityParameters.getPRFAlgorithm() instead.
org.bouncycastle.tls.SignatureScheme.getRSAPSSCryptoHashAlgorithm(int) Use SignatureScheme.getCryptoHashAlgorithm(int) instead.
org.bouncycastle.tls.TlsExtensionsUtils.getServerCertificateTypeExtensionServer(Hashtable, short) Use version without defaultValue instead
org.bouncycastle.tls.TlsUtils.getSignatureAndHashAlgorithm(TlsContext, TlsCredentialedSigner) Will be removed
org.bouncycastle.tls.TlsUtils.getSupportedCipherSuites(TlsCrypto, int[], int) Use TlsUtils.getSupportedCipherSuites(TlsCrypto, int[], int, int) instead.
org.bouncycastle.tls.TlsUtils.isValidCipherSuiteForVersion(int, ProtocolVersion) Use TlsUtils.isValidVersionForCipherSuite(int, ProtocolVersion) instead.
org.bouncycastle.jsse.util.URLConnectionUtil.openInputStream(URL) Use URLConnectionUtil.openStream(URL) instead
org.bouncycastle.tls.Certificate.parse(TlsContext, InputStream, OutputStream) Use version taking a Certificate.ParseOptions argument instead.
org.bouncycastle.tls.TlsUtils.PRF(TlsContext, TlsSecret, String, byte[], int) Use TlsUtils.PRF(SecurityParameters, TlsSecret, String, byte[], int) instead.
org.bouncycastle.tls.TlsProtocol.processMaxFragmentLengthExtension(Hashtable, Hashtable, short) Will be removed.
org.bouncycastle.tls.TlsUtils.readDERObject(byte[]) Will be removed. Use readASN1Object in combination with requireDEREncoding instead
org.bouncycastle.tls.TlsPeer.shouldCheckSigAlgOfPeerCerts() No longer called by the protocol classes. Can call TlsUtils.checkPeerSigAlgs(TlsContext, TlsCertificate[]) once a complete CertPath has been determined (i.e. as part of chain validation).

Deprecated Constructors

Constructor and Description
org.bouncycastle.tls.crypto.impl.bc.BcTlsRSASigner(BcTlsCrypto, RSAKeyParameters, RSAKeyParameters) Use constructor without 'publicKey' parameter.
org.bouncycastle.tls.crypto.impl.jcajce.JcaTlsRSASigner(JcaTlsCrypto, PrivateKey, PublicKey) Use constructor without 'publicKey' parameter.
org.bouncycastle.tls.crypto.impl.TlsAEADCipher(TlsCryptoParameters, TlsAEADCipherImpl, TlsAEADCipherImpl, int, int, int) Use version with extra 'nonceGeneratorFactory' parameter