jruby/jruby — pull request #1543 by kares (2014-03-04 11:32:52+00:00)
Title: openssl 'BC' leak

there's an issue around https://github.com/jruby/jruby/blob/d4ed739885758c482a8a7147f482cf934eeebb67/ext/openssl/src/main/java/org/jruby/ext/openssl/OpenSSLReal.java#L90 ... it might be causing (unpredictable) leaks esp. under environments where multiple Ruby runtimes load their own BC classes and execute `addProvider`.

the only solution is to review all security "getInstance" factory calls and avoid everything that depends on 'BC' being registered (e.g. `NetscapeCertRequest`), which is what happened here with some additional cleanup since I was unable to read some parts of the code (in a shallow attempt to understand what's it doing) ... let me know what do you guys think. I also have this ready for **[jruby-1_7](https://github.com/kares/jruby/tree/openssl-bc-leak-1_7)** since that is what I'm actually be putting onto production :)