You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@pulsar.apache.org by GitBox <gi...@apache.org> on 2020/03/11 07:39:23 UTC
[GitHub] [pulsar] kemburi opened a new issue #6517: BCFIPS not supprted with
pulsar client libraray
kemburi opened a new issue #6517: BCFIPS not supprted with pulsar client libraray
URL: https://github.com/apache/pulsar/issues/6517
**Describe the bug**
Need bcfips support for pulsar clinet.
**To Reproduce**
Steps to reproduce the behavior:
Just deploy on a jboss server which has bcfips support.
Pulsar client will fail with NoClassDefFoundError:
**Expected behavior**
there should be an option to provde a security provider. like bcfips.
**Additional context**
java.lang.NoClassDefFoundError: Could not initialize class org.apache.pulsar.common.util.SecurityUtility
This class has a static block which load the bc provider.
Here is the code block. Here we want to load org.bouncycastle.jce.provider.BouncyCastleFIPSProvider.
static {
// Fixes loading PKCS8Key file: https://stackoverflow.com/a/18912362
java.security.Security.addProvider(new org.bouncycastle.jce.provider.BouncyCastleProvider());
}
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
With regards,
Apache Git Services
[GitHub] [pulsar] jiazhai commented on issue #6517: BCFIPS not supprted with
pulsar client libraray
Posted by GitBox <gi...@apache.org>.
jiazhai commented on issue #6517: BCFIPS not supprted with pulsar client libraray
URL: https://github.com/apache/pulsar/issues/6517#issuecomment-605615235
@kemburi #6588 merged for fix this issue.
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
With regards,
Apache Git Services
[GitHub] [pulsar] jiazhai commented on issue #6517: BCFIPS not supprted with
pulsar client libraray
Posted by GitBox <gi...@apache.org>.
jiazhai commented on issue #6517: BCFIPS not supprted with pulsar client libraray
URL: https://github.com/apache/pulsar/issues/6517#issuecomment-609522024
@kemburi 2.5.1 release will be cut out this week. mean while, you can try StreamNative weekly build:
```
<repository>
<id>bintray-streamnative-maven</id>
<name>bintray</name>
<url>https://dl.bintray.com/streamnative/maven</url>
</repository>
```
this release contains this feature. https://github.com/streamnative/pulsar/releases/tag/v2.6.0-98344a711
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
With regards,
Apache Git Services
[GitHub] [pulsar] jiazhai commented on issue #6517: BCFIPS not supprted with
pulsar client libraray
Posted by GitBox <gi...@apache.org>.
jiazhai commented on issue #6517: BCFIPS not supprted with pulsar client libraray
URL: https://github.com/apache/pulsar/issues/6517#issuecomment-600667932
will take a look
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
With regards,
Apache Git Services
[GitHub] [pulsar] kemburi commented on issue #6517: BCFIPS not supprted with
pulsar client libraray
Posted by GitBox <gi...@apache.org>.
kemburi commented on issue #6517: BCFIPS not supprted with pulsar client libraray
URL: https://github.com/apache/pulsar/issues/6517#issuecomment-597538636
could be, we have an issue where our jboss server already has bcfips jars included, hence this client itself failing, if there is an option to add bcfipis as some parameter, i am fine to accept this as feature.
Is there any configuration to load a particular secuirty provider?
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
With regards,
Apache Git Services
[GitHub] [pulsar] kemburi commented on issue #6517: BCFIPS not supprted with
pulsar client libraray
Posted by GitBox <gi...@apache.org>.
kemburi commented on issue #6517: BCFIPS not supprted with pulsar client libraray
URL: https://github.com/apache/pulsar/issues/6517#issuecomment-597592296
static {
// Fixes loading PKCS8Key file: https://stackoverflow.com/a/18912362
java.security.Security.addProvider(new org.bouncycastle.jce.provider.BouncyCastleProvider());
}
Above hardcoding mandates that we should always use org.bouncycastle.jce.provider.BouncyCastleProvider(), which i think is a bug, it could read from a system property which would become configurable.
This will impact anyone who is already on some other providers.
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
With regards,
Apache Git Services
[GitHub] [pulsar] yjshen commented on issue #6517: BCFIPS not supprted with
pulsar client libraray
Posted by GitBox <gi...@apache.org>.
yjshen commented on issue #6517: BCFIPS not supprted with pulsar client libraray
URL: https://github.com/apache/pulsar/issues/6517#issuecomment-597523535
I suppose this should be a feature request?
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
With regards,
Apache Git Services
[GitHub] [pulsar] kemburi commented on issue #6517: BCFIPS not supprted with
pulsar client libraray
Posted by GitBox <gi...@apache.org>.
kemburi commented on issue #6517: BCFIPS not supprted with pulsar client libraray
URL: https://github.com/apache/pulsar/issues/6517#issuecomment-606506257
@jiazhai
can someone do a maven release of this so that we can consume into our projects?
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
With regards,
Apache Git Services