[
https://issues.jboss.org/browse/JGRP-2279?page=com.atlassian.jira.plugin....
]
Bela Ban commented on JGRP-2279:
--------------------------------
Works for me, on master. I start 3 instances as follows: {{draw -props ./asym-ssl2.xml
-name A}} (then {{-name B}} and {{-name C}}). They successfully cluster:
{noformat}
[belasmac] /Users/bela$ probe.sh jmx=ASYM_ENCRYPT
#1 (606 bytes):
local_addr=B [ip=127.0.0.1:7601, version=4.0.13-SNAPSHOT (Schiener Berg), cluster=draw, 3
mbr(s)]
ASYM_ENCRYPT={after_creation_hook=null, asym_algorithm=RSA, asym_keylength=2048,
change_key_on_leave=true, cipher_pool_size=8, encrypt_entire_message=false,
ergonomics=true, id=59, key_map_max_size=20, key_server=false, key_server_address=A,
key_server_interval=1000, level=WARN, min_time_between_key_requests=2000, provider=null,
sign_msgs=false, stats=true, sym_algorithm=AES/ECB/PKCS5Padding, sym_keylength=128,
use_adler=false, use_external_key_exchange=false,
version=D9B8007ADF58DB36E9029F6F9B43A411}
#2 (605 bytes):
local_addr=A [ip=127.0.0.1:7600, version=4.0.13-SNAPSHOT (Schiener Berg), cluster=draw, 3
mbr(s)]
ASYM_ENCRYPT={after_creation_hook=null, asym_algorithm=RSA, asym_keylength=2048,
change_key_on_leave=true, cipher_pool_size=8, encrypt_entire_message=false,
ergonomics=true, id=59, key_map_max_size=20, key_server=true, key_server_address=A,
key_server_interval=1000, level=WARN, min_time_between_key_requests=2000, provider=null,
sign_msgs=false, stats=true, sym_algorithm=AES/ECB/PKCS5Padding, sym_keylength=128,
use_adler=false, use_external_key_exchange=false,
version=D9B8007ADF58DB36E9029F6F9B43A411}
#3 (606 bytes):
local_addr=C [ip=127.0.0.1:7602, version=4.0.13-SNAPSHOT (Schiener Berg), cluster=draw, 3
mbr(s)]
ASYM_ENCRYPT={after_creation_hook=null, asym_algorithm=RSA, asym_keylength=2048,
change_key_on_leave=true, cipher_pool_size=8, encrypt_entire_message=false,
ergonomics=true, id=59, key_map_max_size=20, key_server=false, key_server_address=A,
key_server_interval=1000, level=WARN, min_time_between_key_requests=2000, provider=null,
sign_msgs=false, stats=true, sym_algorithm=AES/ECB/PKCS5Padding, sym_keylength=128,
use_adler=false, use_external_key_exchange=false,
version=D9B8007ADF58DB36E9029F6F9B43A411}
3 responses (3 matches, 0 non matches)
{noformat}
Error during ASYM_ENCRYPT-----exception occurred decrypting
messagejavax.crypto.BadPaddingException: Given final block not properly padded
------------------------------------------------------------------------------------------------------------------------------------------
Key: JGRP-2279
URL:
https://issues.jboss.org/browse/JGRP-2279
Project: JGroups
Issue Type: Bug
Affects Versions: 4.0.1
Environment: OS:Red Hat
JDK:1.8
Reporter: George Jiang
Assignee: Bela Ban
Priority: Critical
Fix For: 4.0.13
Attachments: asym-ssl2.xml
*asym parameters:*
<ASYM_ENCRYPT encrypt_entire_message="true"
sign_msgs="true"
sym_keylength="128"
sym_algorithm="AES/ECB/PKCS5Padding"
asym_keylength="2048"
asym_algorithm="RSA"
change_key_on_leave="true"/>
*Throws the following error:*
2018-05-23T03:11:53,891 +2903450778 [jgroups--12467,-1491537117,1] ERROR
org.jgroups.protocols.ASYM_ENCRYPT - 1: failed decrypting message from 2 (offset=0,
length=1136, buf.length=1136): javax.crypto.BadPaddingException: Given final block not
properly padded, headers are ASYM_ENCRYPT: [ENCRYPT version=16 bytes], TP:
[cluster_name=-1491537117]
2018-05-23T03:11:53,893 +2903450780 [jgroups--12467,-1491537117,1] TRACE
org.jgroups.protocols.TCP_NIO2 - 1: received message batch of 1 messages from 2
2018-05-23T03:11:53,895 +2903450782 [jgroups--12467,-1491537117,1] DEBUG
org.jgroups.protocols.ASYM_ENCRYPT - 1: received secret key from keyserver 2
2018-05-23T03:11:53,895 +2903450782 [jgroups--12467,-1491537117,1] DEBUG
org.jgroups.protocols.ASYM_ENCRYPT - 1: created 8 symmetric ciphers with secret key (16
bytes)
2018-05-23T03:11:54,369 +2903451256 [jgroups--12467,-1491537117,1] TRACE
org.jgroups.protocols.TCP_NIO2 - 1: received [dst:***
2018-05-23T03:11:54,369 +2903451256 [jgroups--12467,-1491537117,1] WARN
org.jgroups.protocols.ASYM_ENCRYPT - 1: exception occurred decrypting message
javax.crypto.BadPaddingException: Given final block not properly padded
at com.sun.crypto.provider.CipherCore.doFinal(CipherCore.java:991)
~[sunjce_provider.jar:1.8.0_162]
at com.sun.crypto.provider.CipherCore.doFinal(CipherCore.java:847)
~[sunjce_provider.jar:1.8.0_162]
at com.sun.crypto.provider.AESCipher.engineDoFinal(AESCipher.java:446)
~[sunjce_provider.jar:1.8.0_162]
at javax.crypto.Cipher.doFinal(Cipher.java:2222) ~[?:1.8.0_171]
at org.jgroups.protocols.Encrypt.code(Encrypt.java:365)
~[jgroups-4.0.1.Final.jar:4.0.1.Final]
at org.jgroups.protocols.Encrypt.decryptChecksum(Encrypt.java:387)
~[jgroups-4.0.1.Final.jar:4.0.1.Final]
at org.jgroups.protocols.Encrypt._decrypt(Encrypt.java:299)
~[jgroups-4.0.1.Final.jar:4.0.1.Final]
at org.jgroups.protocols.Encrypt.decryptMessage(Encrypt.java:283)
~[jgroups-4.0.1.Final.jar:4.0.1.Final]
at org.jgroups.protocols.Encrypt.handleEncryptedMessage(Encrypt.java:242)
~[jgroups-4.0.1.Final.jar:4.0.1.Final]
at org.jgroups.protocols.Encrypt.handleUpMessage(Encrypt.java:229)
~[jgroups-4.0.1.Final.jar:4.0.1.Final]
at org.jgroups.protocols.Encrypt.up(Encrypt.java:155)
[jgroups-4.0.1.Final.jar:4.0.1.Final]
at org.jgroups.protocols.ASYM_ENCRYPT.up(ASYM_ENCRYPT.java:143)
[jgroups-4.0.1.Final.jar:4.0.1.Final]
at org.jgroups.protocols.VERIFY_SUSPECT.up(VERIFY_SUSPECT.java:129)
[jgroups-4.0.1.Final.jar:4.0.1.Final]
at org.jgroups.protocols.FD_ALL.up(FD_ALL.java:197)
[jgroups-4.0.1.Final.jar:4.0.1.Final]
at org.jgroups.protocols.FD_SOCK.up(FD_SOCK.java:252)
[jgroups-4.0.1.Final.jar:4.0.1.Final]
at org.jgroups.protocols.MERGE3.up(MERGE3.java:277)
[jgroups-4.0.1.Final.jar:4.0.1.Final]
at org.jgroups.protocols.Discovery.up(Discovery.java:262)
[jgroups-4.0.1.Final.jar:4.0.1.Final]
at org.jgroups.protocols.TP.passMessageUp(TP.java:1203)
[jgroups-4.0.1.Final.jar:4.0.1.Final]
at
org.jgroups.util.SubmitToThreadPool$SingleMessageHandler.run(SubmitToThreadPool.java:87)
[jgroups-4.0.1.Final.jar:4.0.1.Final]
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
[?:1.8.0_162]
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
[?:1.8.0_162]
at java.lang.Thread.run(Thread.java:748) [?:1.8.0_162]
--
This message was sent by Atlassian JIRA
(v7.5.0#75005)