Replace clustered session manager's session generation algorithm
----------------------------------------------------------------
Key: JBAS-7475
URL:
https://jira.jboss.org/jira/browse/JBAS-7475
Project: JBoss Application Server
Issue Type: Task
Security Level: Public (Everyone can see)
Components: Clustering, Web (Tomcat) service
Reporter: Brian Stansberry
Assignee: Brian Stansberry
Fix For: JBossAS-6.0.0.M2
Instead use the same algorithm as used by Tomcat/JBoss Web StandardManager
1) Get random bytes from dev/urandom if available
2) Else seed random with function of System.nanoTime() + entropy
3) Consider using the same encoding used by Tomcat, eliminating the SessionIdAlphabet
config with its problematic special chars. The downside to this is it results in a larger
session id string (32 chars instead of 24) since the set of available chars is smaller (17
instead of 64).
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see:
http://www.atlassian.com/software/jira