-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Mark,
On 11/21/18 11:51, Mark Thomas wrote: > On 21/11/2018 16:36, Mark Thomas wrote: >> On 21/11/2018 15:37, Mark Thomas wrote: >>> On 21/11/2018 15:29, Christopher Schultz wrote: >>>> All, >>>> >>>> With this last patch, I'm ready for a back-port to tc8.5.x, >>>> but I'm waiting for a user who is trying to get this working >>>> on tc9.0 to be successful. >>>> >>>> If anyone else can confirm that this is all working in a real >>>> cluster (dev/test is okay) then I'll go ahead and back-port, >>>> assuming there is some kind of configuration error in that >>>> particular user's case. >>> >>> I'll fire up my 4 node test cluster and let you know. It may >>> take me a while - there are usually a bunch of OS updates >>> waiting for me when I start it up. >> >> I'm seeing lots of errors. >> >> I think the problem is that the interceptor is using one Cipher >> for all members but nodes don't send the same messages to every >> member so the members get out of sync and decryption starts >> failing. > > Oh, and to add to the 'fun' messages may be processed out of > order. That should also be okay, since messages aren't related to each other. But it might be a problem with trying to prevent replay attacks. - -chris -----BEGIN PGP SIGNATURE----- Comment: Using GnuPG with Thunderbird - https://www.enigmail.net/ iQIzBAEBCAAdFiEEMmKgYcQvxMe7tcJcHPApP6U8pFgFAlv1tXAACgkQHPApP6U8 pFhK0xAAn6LzQE+005qETnCIP1/BjUxllOkiqe6MX07GWxd/MuxOOcpQZWBgJhQB /LdoAApulNvQw8Wv77XgTFv2g5C7vc3bNYX+4D5jPtwq494RmOJz/Vj/2H6d0eCX Elj+0tWjAJoNBBU9L2n5tgGuA6N8ePnF7hCGdKV5hNSTjRrQFQ2cUGEWxRT0lJto 4V+THAt9J2MimvlDbmYM8q6b4v5re+C0lsHWn3eGzuYAv7bdXk8mY51Xu7dU+SGV ReyIpy7yfkeh4WZoJMowBtEO51AdVy8A30mNOvikpgcZWQufdYRaIANodJGeoK5X o4XxMA4+AYC0zUPXwAjy9XND/S6eLHI2V7CP2zqeWeEgxeTEKbEBUSu7dQsO6IRH sf+rpR0h0Z90szha87i7Ky5MBIC5Jlw7RwJE9gnWfZP/h5sWRatpPTCfLxs9r46E q5KhRw8OhXqGR5qD92TKF3AewyQ1ciY/AhmRGORe0Z3s7CGc1t8BolUXWeiM+y// L37duwJ+BvaLxzP/qZ3lmit0wMCHS5J2EzJcMRd8811o7ujZTFZfMRD9jays8JaT mRm5MJLvMr4WG4xjQSr85Iy9sbxR+J9olYOWB3gp+71KwXqP0NHEIwcFuRkdw7GT QbULu2r6FuxjiC4e4oukry6eaGD24kiJ8oWah9fe0Pdg0pGl1Mc= =MfIG -----END PGP SIGNATURE----- --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
