[
https://issues.apache.org/jira/browse/SOLR-9068?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Hoss Man resolved SOLR-9068.
----------------------------
Resolution: Fixed
Fix Version/s: (was: 6.0)
(was: 4.9)
master (7.0)
6.1
Haven't seen this fail since the the latest fix, so i'm calling this resolved.
bq. The remaining question is still: why did it sometimes not like the bytes we
return? Theoretically, our random could also return all 0-bytes - would it fail
then? As a queick fix this looks good, but I would like to understand it!
I would like to understand it too, but i don't have the time/patience to deal
with trying to figure out how to write a non-solr/non-jetty test case to try
and submit to oracle. If you do have the time feel free to do so and give me
all the credit :)
> BadPaddingException when running SSL test using NullSecureRandom
> ----------------------------------------------------------------
>
> Key: SOLR-9068
> URL: https://issues.apache.org/jira/browse/SOLR-9068
> Project: Solr
> Issue Type: Sub-task
> Reporter: Hoss Man
> Fix For: 6.1, master (7.0)
>
> Attachments: SOLR-9068.Lucene-Solr-6.x-Solaris_110.log,
> SOLR-9068.Lucene-Solr-master-Solaris_558.log, SOLR-9068.patch, SOLR-9068.patch
>
>
> In parent issue SOLR-5776, NullSecureRandom was introduced and SSLTestConfig
> was refactored so that both client & server would use it to prevent blocked
> threads waiting for entropy.
> Since those commits to master & branch_6x, all Solaris jenkins builds got
> failures at the same spots in
> TestMiniSolrCloudClusterSSL.testSslAndNoClientAuth - and looking at the logs
> the root cause appears to be intranode communication failures due to
> "javax.crypto.BadPaddingException"
> Initial speculation was that perhaps the Solaris SSL impl has bugs in it's
> padding code that are tickled when the SecureRandom instance returns long
> strings of null bytes, but subsequently we got reports of similar, less
> frequently occuring, bugs on other OSs (see SOLR-9082).
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
