[
https://issues.apache.org/jira/browse/IGNITE-13520?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17220631#comment-17220631
]
Ignite TC Bot commented on IGNITE-13520:
----------------------------------------
{panel:title=Branch: [pull/8317/head] Base: [master] : No blockers
found!|borderStyle=dashed|borderColor=#ccc|titleBGColor=#D6F7C1}{panel}
{panel:title=Branch: [pull/8317/head] Base: [master] : New Tests
(6)|borderStyle=dashed|borderColor=#ccc|titleBGColor=#D6F7C1}
{color:#00008b}Basic 3{color} [[tests
6|https://ci.ignite.apache.org/viewLog.html?buildId=5687194]]
* {color:#013220}IgniteBasicWithPersistenceTestSuite:
EncryptedCacheNodeJoinTest.testServerNodeJoinInactiveClusterWithNewStaticCacheConfig
- PASSED{color}
* {color:#013220}IgniteBasicWithPersistenceTestSuite:
EncryptedCacheNodeJoinTest.testClientNodeJoinInactiveClusterWithExistingStaticCacheConfig
- PASSED{color}
* {color:#013220}IgniteBasicWithPersistenceTestSuite:
EncryptedCacheNodeJoinTest.testServerNodeJoinActiveClusterWithNewStaticCacheConfig
- PASSED{color}
* {color:#013220}IgniteBasicWithPersistenceTestSuite:
EncryptedCacheNodeJoinTest.testClientNodeJoinInactiveClusterWithNewStaticCacheConfig
- PASSED{color}
* {color:#013220}IgniteBasicWithPersistenceTestSuite:
EncryptedCacheNodeJoinTest.testClientNodeJoinActiveClusterWithExistingStaticCacheConfig
- PASSED{color}
* {color:#013220}IgniteBasicWithPersistenceTestSuite:
EncryptedCacheNodeJoinTest.testClientNodeJoinActiveClusterWithNewStaticCacheConfig
- PASSED{color}
{panel}
[TeamCity *--> Run :: All*
Results|https://ci.ignite.apache.org/viewLog.html?buildId=5692958&buildTypeId=IgniteTests24Java8_RunAll]
> Сlient node with a static encrypted cache configuration can generate an
> encryption key when joining.
> ----------------------------------------------------------------------------------------------------
>
> Key: IGNITE-13520
> URL: https://issues.apache.org/jira/browse/IGNITE-13520
> Project: Ignite
> Issue Type: Bug
> Affects Versions: 2.9
> Reporter: Pavel Pereslegin
> Assignee: Pavel Pereslegin
> Priority: Major
> Labels: encryption
> Fix For: 2.10
>
> Time Spent: 1h
> Remaining Estimate: 0h
>
> Currently, when a client node joins a cluster with a static encrypted cache
> configuration, it generates an encryption key for that cache and sends it to
> the cluster (just like the server node does).
> _SpringEncryptedCacheRestartClientTest_ reproduces this behavior and it is
> unexpected, it happens due to IGNITE-13567 (see
> _GridEncryptionManager#collectJoiningNodeData_).
> The client node should not generate encryption keys and should be able to
> start without configuring EncryptionSPI.
> After doing some research on possible solutions, we decided to reject node
> joining in such a situation, because there is no clean and simple way to
> distribute the same encryption key between server nodes that are already in
> the cluster (we have to either add discovery overhead, block the exchange, or
> add an additional exchange to be able to distribute keys between server nodes
> that are already in the cluster).
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
