Bug #111361 Update to official Bouncy Castle nuget package
Submitted: 12 Jun 2023 9:17 Modified: 11 Sep 2023 14:10
Reporter: Camille Guerin Email Updates:
Status: Closed Impact on me:
None 
Category:Connector / NET Severity:S3 (Non-critical)
Version:8.0.33 OS:Any
Assigned to: CPU Architecture:Any

[12 Jun 2023 9:17] Camille Guerin 
Description:
Currently the MySQL C# connector is using a non official Bouncy Castle nuget package: Portable.BouncyCastle 1.9.0 (https://www.nuget.org/packages/Portable.BouncyCastle/)
The official and maintained Bouncy Castle nuget package is BouncyCastle.Cryptography 2.2.1 (https://www.nuget.org/packages/BouncyCastle.Cryptography) ยด

Source: https://www.bouncycastle.org/csharp/

"Release Notes for 2.0.0
With this release we have finally moved to building for modern .NET versions (directly targeted frameworks: net461, netstandard2.0, net6.0), and distributing using NuGet (package name BouncyCastle.Cryptography). We have also adopted Semantic Versioning 2.0.0 for package versioning."

Some other nuget packages (MimeKit,...) have already updated their dependencies to use the official package

How to repeat:
n/a
[12 Jun 2023 9:49] MySQL Verification Team 
Hello Camille Guerin,

Thank you for the report and feedback.

regards,
Umesh
[11 Sep 2023 14:10] Christine Cole 
Posted by developer:
 
Fixed as of the upcoming MySQL Connector/NET 8.2.0 release, and here's the proposed changelog entry from the documentation team:

Updated the Portable.BouncyCastle 1.9.0 NuGet package reference to
BouncyCastle.Cryptography 2.2.1, which is the currently maintained
package.

Thank you for the bug report.