[
https://issues.jboss.org/browse/JGRP-2152?page=com.atlassian.jira.plugin....
]
Michal Vinkler commented on JGRP-2152:
--------------------------------------
[~rachmato], [~belaban], we did not have any failover tests using AUTH + ASYM_ENCRYPT, so
I added one.
I added both ASYM_ENCRYPT and AUTH as Bela suggested. I used EAP 7.1.0.DR10 build (uses
jgroups-3.6.11.Final-redhat-1.jar) and also 7.1.0.DR6 build (the last one using
jgroups-3.6.10.Final-redhat-1.jar).
Test description:
4 node cluster + mod-jk loadbalancer, one cluster node at the time is shut down (and then
restarted after some time), while 2000 standalone clients keep calling the application.
link to the Jenkins runs:
[run 4 - EAP 7.1.0.DR10 with
jgroups-3.6.11.Final|http://jenkins.mw.lab.eng.bos.redhat.com/hudson/job/...]
[run 5 - EAP 7.1.0.DR6 with
jgroups-3.6.10.Final|http://jenkins.mw.lab.eng.bos.redhat.com/hudson/job/...]
link to standalone-ha.xml: [perf18 standalone-ha.xml (run
4)|http://jenkins.mw.lab.eng.bos.redhat.com/hudson/job/mvinkler_perflab_e...]
*run 4 - EAP 7.1.0.DR10 with jgroups-3.6.11.Final:*
There were few occurences of these error messages (see for example [perf21
log|http://jenkins.mw.lab.eng.bos.redhat.com/hudson/job/mvinkler_perflab_...]):
{code}
[JBossINF] [0m[31m06:13:48,376 ERROR [org.jgroups.protocols.ASYM_ENCRYPT]
(thread-1,ee,perf21) null: key server is currently not set
[JBossINF] [0m[31m06:21:59,162 ERROR [org.jgroups.protocols.ASYM_ENCRYPT]
(thread-6,ee,perf21) perf21: failed decrypting message from perf19 (offset=0, length=4880,
buf.length=4880): java.lang.NullPointerException, headers are ASYM_ENCRYPT: [ENCRYPT
version=n/a]
[JBossINF] [0m[31m06:21:59,163 ERROR [org.jgroups.protocols.ASYM_ENCRYPT]
(thread-6,ee,perf21) perf21: failed decrypting message from perf19 (offset=0, length=4880,
buf.length=4880): java.lang.NullPointerException, headers are ASYM_ENCRYPT: [ENCRYPT
version=n/a]
[JBossINF] [0m[31m06:21:59,166 ERROR [org.jgroups.protocols.ASYM_ENCRYPT]
(thread-6,ee,perf21) perf21: failed decrypting message from perf19 (offset=0, length=4880,
buf.length=4880): java.lang.NullPointerException, headers are ASYM_ENCRYPT: [ENCRYPT
version=n/a]
{code}
The NPE seems as a bug to me.
But other than that, there were no other issues. There were 15 sampline errors in total
(i.e. client got stale data/bad response 15 times).
*run 5 - EAP 7.1.0.DR6 with jgroups-3.6.10.Final:*
There are *thousands* of occurrences of these WARN/ERROR messages (see for example [perf20
log|http://jenkins.mw.lab.eng.bos.redhat.com/hudson/job/mvinkler_perflab_...]):
{code}
[JBossINF] [0m[33m07:00:13,579 WARN [org.jgroups.protocols.ASYM_ENCRYPT]
(thread-8,ee,perf20) perf20: exception occurred decrypting message
[JBossINF] [0m[31m07:00:13,580 ERROR [org.jgroups.protocols.ASYM_ENCRYPT]
(thread-1,ee,perf20) perf20: failed decrypting message from perf19 (offset=0, length=4960,
buf.length=4960): javax.crypto.BadPaddingException: Given final block not properly padded,
headers are ASYM_ENCRYPT: [ENCRYPT version=16 bytes]
{code}
There were 201 sampling errors in total (I would expect somewhat bigger number considering
the number of ERROR messages).
Regarding the authentication/encryption tests in JGroups testsuite - see [~rjanik]'s
answer:
I assume you're looking for JGroups version 3.6.10.Final (version for Wildfly 10.1,
which is mentioned in the Jira). I can see some authentication/encryption tests in the
JGroups testsuite under tag JGroups-3.6.10.Final. Some of them have @since 4.0, but I can
see them nevertheless (?).
These would be
EncryptTest (disabled)
ENCRYPTAsymmetricTest
ENCRYPTKeystoreTest
ASYM_ENCRYPT_Test
SYM_ENCRYPT_Test
SASLTest
SASL_SimpleAuthorizingCallbackTest
Some of these also reference AUTH.
ASYM_ENCRYPT failure on Wildfly 10.1.0
--------------------------------------
Key: JGRP-2152
URL:
https://issues.jboss.org/browse/JGRP-2152
Project: JGroups
Issue Type: Bug
Affects Versions: 3.6.10
Reporter: Matt Wringe
Assignee: Bela Ban
Fix For: 4.0, 3.6.13
Attachments: hawkular-metrics-1.log, hawkular-metrics-2.log,
org.jboss.as.test.clustering.cluster.cdi.CdiFailoverTestCase-SYNC-tcp-output.txt,
standalone.xml
Using ASYM_ENCRYPT on Wildfly 10.1.0 seems to be broken.
I am using the parameters for ASYM_ENCRYPT specified in
http://www.jgroups.org/manual/index.html#Security
Note: running with SYM_ENCRYPT doesn't cause any issues and it works fine with my
setup. Its only ASYM_ENCRYPT which is currently failing.
Note: running this on EAP fails in a similar manner.
Eg:
<protocol type="ASYM_ENCRYPT">
<property name="encrypt_entire_message">true</property>
<property name="sym_keylength">128</property>
<property name="sym_algorithm">AES/ECB/PKCS5Padding</property>
<property name="asym_keylength">512</property>
<property name="asym_algorithm">RSA</property>
</protocol>
If I run a single instance, then I don't see any problems appear in the logs. Its
when I start a second instance that I start to see errors about unrecognised ciphers and
timeouts.
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)