On Wed, Dec 19, 2018, 11:00 PM Christopher Schultz < ch...@christopherschultz.net wrote:
> -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA256 > > Tim, > > Tomcat 9.0.14 is available and should work much better. Would it be > possible for you to test the latest release with the encrypted clusterin > g? > > Thanks, > - -chris > > On 11/24/18 11:13, Christopher Schultz wrote: > > Tim, > > > > On 11/23/18 12:55, Christopher Schultz wrote: > >> Okay, the problem is that I built the EncryptInterceptor without > >> realizing that cluster-messaging isn't single-threaded. It's > >> completely non-thread-safe and it needs to be. > > > >> There is a simple fix that can be applied (synchronize the > >> encrypt and decrypt methods) but it'll create a big bottleneck > >> for you. On the other hand, it's easy to apply and test and > >> ensure it's working in your environment. Are you willing to grab > >> the Tomcat source and compile it? If you get the 9.0.13 source > >> and are able to compile it, I can give you a 2-line patch that > >> should fix your issue. Alternatively, I can give you a patched > >> catalina-tribes.jar that you can just drop-in-replace to try > >> out. > > > >> I have a more elaborate patch that I'm going to apply soon and it > >> should be available in the next release of Tomcat 9. > > > > I think this should be fixed, now. If you build from trunk, I > > think things will work remarkably better for you. Or, just wait > > until the next release (a few weeks maybe). If you *can* build from > > source, it would be great to get some real-world mileage on this > > code before the next release. > > > > -chris > > > > --------------------------------------------------------------------- > > > > > To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org > > For additional commands, e-mail: users-h...@tomcat.apache.org > > > -----BEGIN PGP SIGNATURE----- > Comment: Using GnuPG with Thunderbird - https://www.enigmail.net/ > > iQIzBAEBCAAdFiEEMmKgYcQvxMe7tcJcHPApP6U8pFgFAlwbE9MACgkQHPApP6U8 > pFhHPQ/+PMCSp8YuG811TLmzZg91gdgbxXgMOKrSnNDh/w3paiUhQD2+uPW8FPbP > 3E8yRgN34JOm+r5ND3x57e3TpXXO9QzQ287d7Pka2RxLlkz4tj/wPbRmyiNaot/t > f/IjVx0NdLdfCxEkntcTAwQUUkqP6VM8umrN2URJqsWqTVs0tqFGMtw2xe8zVCIT > FkZCfwTqGFCHa65iCTlA8LCJbhc1E1d8lDJVBetYrEREE//3y6U1xEbfOJPcKdEv > s8RsTcdOt4A0iQDyqdY0Zsj58Bb6xSUfdRVSqgmQDUDUF3SQLif9a38VNwp2xaPE > BgQiiLHa6Mpmd2+2iZPM/k3GcTSVeFq21opvmlKmYI1QNhy++UsOHbQ1KaSPbDed > GIQ+MWE8K4SPIbX3RSz9lJqKySJabDsQliI+Cfktz6Q0MhvQoFH33E2IsrxgFUxn > 3tU/Yyaa6fUpRYmWuersKU2ps3BMoMT4dwou57cQiTqcgHDVYXcXj64pJv5EM2Ap > /dL1pzAlv0mKkS+wIeFraVvAbH0qeg2sjk0kEjQTN+hrYi74UpKrp076Oc2i8TUI > Wc7TmSiuBqpAIjNb3oLjs1EjbI/B8V2tULOUJYlWz2GTPSdJAQp/u/8lQpu26m6W > EisenCnlc18ANvuIko/ZqlXNKrYIkociip1krluNGH2gCmq/6N4= > =5/TA > -----END PGP SIGNATURE----- > > --------------------------------------------------------------------- > To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org > For additional commands, e-mail: users-h...@tomcat.apache.org I just downloaded and tried 9.0.14 but I'm still getting the same BadPaddingException upon starting the second instance. I confirmed the encryptionKey matches on my two instances. > >
