Upgrade to Bouncy Castle 1.79

Closes gh-6
spring-io · Nov 19, 2024 · e813a63 · e813a63
1 parent ed481ef
commit e813a63
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 2 deletions.
diff --git a/build.gradle b/build.gradle
@@ -42,7 +42,7 @@ dependencies {
 
 	implementation(platform(org.springframework.boot.gradle.plugin.SpringBootPlugin.BOM_COORDINATES))
 
-	implementation("org.bouncycastle:bcpg-jdk18on:1.77")
+	implementation("org.bouncycastle:bcpg-jdk18on:1.79")
 	implementation("org.springframework:spring-web")
 	implementation("org.springframework.boot:spring-boot-starter-json")
 

diff --git a/src/main/java/io/spring/github/actions/artifactorydeploy/openpgp/ArmoredAsciiSigner.java b/src/main/java/io/spring/github/actions/artifactorydeploy/openpgp/ArmoredAsciiSigner.java
@@ -199,7 +199,8 @@ private void sign(InputStream source, ArmoredOutputStream destination) throws PG
 	}
 
 	private PGPSignatureGenerator getSignatureGenerator() throws PGPException {
-		PGPSignatureGenerator signatureGenerator = new PGPSignatureGenerator(this.contentSigner);
+		PGPSignatureGenerator signatureGenerator = new PGPSignatureGenerator(this.contentSigner,
+				this.signingKey.getPublicKey());
 		signatureGenerator.init(PGPSignature.BINARY_DOCUMENT, this.privateKey);
 		PGPSignatureSubpacketGenerator subpacketGenerator = getSignatureSubpacketGenerator();
 		signatureGenerator.setHashedSubpackets(subpacketGenerator.generate());