You are viewing a plain text version of this content. The canonical link for it is here.

Posted to notifications@ofbiz.apache.org by "Xin Wang (Jira)" <ji...@apache.org> on 2021/07/04 11:51:00 UTC

[jira] [Created] (OFBIZ-12275) Upgrade Apache Shiro to 1.7.1

Xin Wang created OFBIZ-12275:
--------------------------------

             Summary: Upgrade Apache Shiro to 1.7.1
                 Key: OFBIZ-12275
                 URL: https://issues.apache.org/jira/browse/OFBIZ-12275
             Project: OFBiz
          Issue Type: Improvement
    Affects Versions: Trunk
            Reporter: Xin Wang


As stated by comment, after upgrading Shiro to latest version, an EntityCrypto exception will be triggered when loading data.

After some investigation, I found that the default padding scheme of ECB mode in Shiro is different between v1.4.1 and v1.7.1, i.e.:

v1.4.1 getPaddingSchemeName() output: PKCS5Padding

v1.7.1 getPaddingSchemeName() output: NoPadding

After specifying padding scheme explicitly, EntityCrypto exception does not raise anymore.

I'll create a pull request in GitHub.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)