Karel Piwko commented on Bug AGPUSH-329

As for OpenJDK + NSS, it looks like that NSS implementation simply does not provide a SecureRandom provider.

SunPKCS11-NSS version 1.7
        Signature.MD2withRSA
        Cipher.DES/CBC/NoPadding
        Cipher.AES/CBC/PKCS5Padding
        Cipher.RSA/ECB/NoPadding
        Cipher.DES/CBC/PKCS5Padding
        KeyFactory.DH
        Signature.RawDSA
        KeyGenerator.SunTlsMasterSecret
        Cipher.RSA/ECB/PKCS1Padding
        Alg.Alias.Cipher.RSA
        Alg.Alias.MessageDigest.SHA-1
        Alg.Alias.KeyAgreement.DiffieHellman
        Alg.Alias.KeyPairGenerator.DiffieHellman
        KeyAgreement.DH
        Cipher.DESede/ECB/NoPadding
        Provider.id className
        Alg.Alias.MessageDigest.SHA
        Mac.HmacSHA384
        Cipher.AES/ECB/NoPadding
        Mac.HmacSHA512
        KeyFactory.DSA
        Mac.HmacMD5
        Mac.SslMacMD5
        SecretKeyFactory.ARCFOUR
        Mac.HmacSHA1
        KeyGenerator.DES
        Mac.SslMacSHA1
        Alg.Alias.Cipher.DESede
        Cipher.DESede/CBC/PKCS5Padding
        SecretKeyFactory.DES
        Provider.id name
        Cipher.DESede/CBC/NoPadding
        Cipher.AES/ECB/PKCS5Padding
        Signature.SHA1withRSA
        KeyStore.PKCS11
        Cipher.ARCFOUR
        KeyGenerator.AES
        Cipher.DES/ECB/PKCS5Padding
        SecretKeyFactory.DESede
        Alg.Alias.Signature.SHA1withDSA
        Signature.MD5withRSA
        MessageDigest.SHA-384
        SecretKeyFactory.AES
        Signature.SHA512withRSA
        KeyPairGenerator.RSA
        Cipher.AES/CBC/NoPadding
        KeyPairGenerator.DH
        KeyGenerator.ARCFOUR
        MessageDigest.SHA-512
        KeyGenerator.SunTlsPrf
        Provider.id version
        Alg.Alias.KeyFactory.DiffieHellman
        Signature.SHA256withRSA
        KeyGenerator.SunTlsKeyMaterial
        Alg.Alias.Cipher.DES
        Alg.Alias.Signature.NONEwithDSA
        Mac.HmacSHA256
        Alg.Alias.Cipher.RC4
        Signature.SHA384withRSA
        Alg.Alias.KeyStore.PKCS11-NSS
        Alg.Alias.KeyGenerator.RC4
        Cipher.DES/ECB/NoPadding
        Cipher.DESede/ECB/PKCS5Padding
        Cipher.AES/CTR/NoPadding
        Alg.Alias.Cipher.AES
        KeyGenerator.SunTlsRsaPremasterSecret
        SecureRandom.PKCS11
        Alg.Alias.SecretKeyFactory.RC4
        KeyFactory.RSA
        KeyPairGenerator.DSA
        Provider.id info
        MessageDigest.SHA1
        Signature.DSA
        MessageDigest.MD5
        MessageDigest.SHA-256
        MessageDigest.MD2
        KeyGenerator.DESede

Therefore, there should be a different way how to generate secret key. I verified that branch mentioned in https://github.com/danbev/aerogear-simplepush-server/tree/0.8.0-secret-key-issue is working fine with OpenJDK7 + NSS.

So, now I have to figure out what's wrong with my Oracle JDK NSS setup.

This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira