From 8a49f57c17e892d3212b78f19332352ed1f88ceb Mon Sep 17 00:00:00 2001
From: Sachini De Silva <madusha.sachini@yahoo.com>
Date: Thu, 5 Feb 2026 12:56:54 +0530
Subject: [PATCH] Upgrade bouncy castle version

---
 components/org.wso2.transport.http.netty/pom.xml     |  6 ++----
 .../certificatevalidation/ocsp/OCSPVerifier.java     |  4 ++--
 pom.xml                                              | 12 ++++++------
 3 files changed, 10 insertions(+), 12 deletions(-)

diff --git a/components/org.wso2.transport.http.netty/pom.xml b/components/org.wso2.transport.http.netty/pom.xml
index 9e375f891..0b21b0207 100644
--- a/components/org.wso2.transport.http.netty/pom.xml
+++ b/components/org.wso2.transport.http.netty/pom.xml
@@ -87,13 +87,11 @@
         </dependency>
         <dependency>
             <groupId>org.bouncycastle</groupId>
-            <artifactId>bcprov-jdk15on</artifactId>
-            <version>${bcprov-jdk15on.version}</version>
+            <artifactId>bcprov-jdk18on</artifactId>
         </dependency>
         <dependency>
             <groupId>org.bouncycastle</groupId>
-            <artifactId>bcpkix-jdk15on</artifactId>
-            <version>${bcpkix-jdk15on.version}</version>
+            <artifactId>bcpkix-jdk18on</artifactId>
         </dependency>
         <dependency>
             <groupId>io.netty</groupId>
diff --git a/components/org.wso2.transport.http.netty/src/main/java/org/wso2/transport/http/netty/contractimpl/common/certificatevalidation/ocsp/OCSPVerifier.java b/components/org.wso2.transport.http.netty/src/main/java/org/wso2/transport/http/netty/contractimpl/common/certificatevalidation/ocsp/OCSPVerifier.java
index 5aa85933c..9cf938dcd 100644
--- a/components/org.wso2.transport.http.netty/src/main/java/org/wso2/transport/http/netty/contractimpl/common/certificatevalidation/ocsp/OCSPVerifier.java
+++ b/components/org.wso2.transport.http.netty/src/main/java/org/wso2/transport/http/netty/contractimpl/common/certificatevalidation/ocsp/OCSPVerifier.java
@@ -18,8 +18,8 @@
  */
 package org.wso2.transport.http.netty.contractimpl.common.certificatevalidation.ocsp;
 
+import org.bouncycastle.asn1.ASN1IA5String;
 import org.bouncycastle.asn1.ASN1InputStream;
-import org.bouncycastle.asn1.DERIA5String;
 import org.bouncycastle.asn1.DEROctetString;
 import org.bouncycastle.asn1.ocsp.OCSPObjectIdentifiers;
 import org.bouncycastle.asn1.ocsp.OCSPResponseStatus;
@@ -291,7 +291,7 @@ public static List<String> getAIALocations(X509Certificate cert) throws Certific
 
             GeneralName gn = accessDescription.getAccessLocation();
             if (gn.getTagNo() == GeneralName.uniformResourceIdentifier) {
-                DERIA5String str = DERIA5String.getInstance(gn.getName());
+                ASN1IA5String str = ASN1IA5String.getInstance(gn.getName());
                 String accessLocation = str.getString();
                 ocspUrlList.add(accessLocation);
             }
diff --git a/pom.xml b/pom.xml
index 30eb8a32a..a69a889c0 100644
--- a/pom.xml
+++ b/pom.xml
@@ -257,13 +257,13 @@
             </dependency>
             <dependency>
                 <groupId>org.bouncycastle</groupId>
-                <artifactId>bcprov-jdk15on</artifactId>
-                <version>${bcprov-jdk15on.version}</version>
+                <artifactId>bcprov-jdk18on</artifactId>
+                <version>${bcprov-jdk18on.version}</version>
             </dependency>
             <dependency>
                 <groupId>org.bouncycastle</groupId>
-                <artifactId>bcpkix-jdk15on</artifactId>
-                <version>${bcpkix-jdk15on.version}</version>
+                <artifactId>bcpkix-jdk18on</artifactId>
+                <version>${bcpkix-jdk18on.version}</version>
             </dependency>
             <dependency>
                 <groupId>io.netty</groupId>
@@ -408,8 +408,8 @@
         <jsch.version>0.1.51.wso2v1</jsch.version>
         <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
         <org.atomikos.wso2.version>3.8.0.wso2v1</org.atomikos.wso2.version>
-        <bcprov-jdk15on.version>1.69</bcprov-jdk15on.version>
-        <bcpkix-jdk15on.version>1.69</bcpkix-jdk15on.version>
+        <bcprov-jdk18on.version>1.83</bcprov-jdk18on.version>
+        <bcpkix-jdk18on.version>1.83</bcpkix-jdk18on.version>
         <netty-tcnative-boringssl-static.version>2.0.65.Final</netty-tcnative-boringssl-static.version>
 
         <unirest.version>1.4.9</unirest.version>