When verify signature receive java.io.EOFException: Unexpected end of ZIP input stream about bc-java HOT 4 OPEN

Writing a PGP extension on top of Apache James server, using bouncyCastle 1.77 we encounter the very same issue.

Downgrade to 1.70 solves the issue.

An alternative could be .setWithIntegrityPacket(false) but it looks unsafe.

from bc-java.

Have done some investigation using older versions.

I did not have to roll back so far, only to 1.71.1 for my code to work.

The release notes for version 1.72 indicate a change in the BZIP2 implementation.

The release notes for version 1.73 indicate a change in the BCPGInputStream class.

I wonder if the latter is the source of the problem I am encountering.

from bc-java.

@dghgit

Sorry to call you in. Need a bit of advice.

The change of interest in the BCPGInputStream class for v1.73; in the readPacket() method, the general change was in.read() calls change to this.read() calls. (d594ee2 08/10/2022).
I'm wondering if the same sort of change needs to happen in the readPacketTag() method too to help resolve the problem I'm encountering.
Part of the reason I'm asking is I would have to set-up a gradle environment to investigate. Using gradle which would be new too me. I use maven regularly.

Hope you can help, Thanks.

from bc-java.

Hmm. Possibly, change should appear on github shortly, but try what's in https://www.bouncycastle.org/betas and let me know how it goes.

from bc-java.