Sadly, I can’t duplicate this. I even looked at our heroku instance and you 
can see the LT changes are now encrypted in the login view:

http://jasigcas.herokuapp.com/login



This may be caused by duplicate or conflicting dependencies. Run a 
dependency tree and see what might be causing this.



From: Misagh Moayyed [mailto:mmoay...@unicon.net]
Sent: Thursday, November 6, 2014 2:19 PM
To: 'cas-dev@lists.jasig.org'
Subject: RE: [cas-dev] CAS 4.1: issue with the webflow stored on client side



Looking into this. Stand by please.



From: Jérôme LELEU [mailto:lel...@gmail.com]
Sent: Thursday, November 6, 2014 2:37 AM
To: cas-dev@lists.jasig.org
Subject: [cas-dev] CAS 4.1: issue with the webflow stored on client side



Hi Misagh,



Since the merge of the PR #345 , I have this strange error at startup (Java 
7, Tomcat 7):



Caused by: org.springframework.beans.factory.BeanCreationException: Error 
creating bean with name 'loginFlowStateTranscoder' defined in ServletContext 
resource [/WEB-INF/cas-servlet.xml]: Instantiation of bean failed; nested 
exception is org.springframework.beans.BeanInstantiationException: Could not 
instantiate bean class 
[org.jasig.spring.webflow.plugin.EncryptedTranscoder]: Constructor threw 
exception; nested exception is java.lang.SecurityException: class 
"org.bouncycastle.util.Arrays"'s signer information does not match signer 
information of other classes in the same package

          at 
org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.instantiateBean(AbstractAutowireCapableBeanFactory.java:1095)

          at 
org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBeanInstance(AbstractAutowireCapableBeanFactory.java:1040)

          at 
org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.doCreateBean(AbstractAutowireCapableBeanFactory.java:505)

          at 
org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBean(AbstractAutowireCapableBeanFactory.java:476)

          at 
org.springframework.beans.factory.support.AbstractBeanFactory$1.getObject(AbstractBeanFactory.java:302)

          at 
org.springframework.beans.factory.support.DefaultSingletonBeanRegistry.getSingleton(DefaultSingletonBeanRegistry.java:229)

          at 
org.springframework.beans.factory.support.AbstractBeanFactory.doGetBean(AbstractBeanFactory.java:298)

          at 
org.springframework.beans.factory.support.AbstractBeanFactory.getBean(AbstractBeanFactory.java:193)

          at 
org.springframework.beans.factory.support.BeanDefinitionValueResolver.resolveReference(BeanDefinitionValueResolver.java:328)

          ... 66 more

Caused by: org.springframework.beans.BeanInstantiationException: Could not 
instantiate bean class 
[org.jasig.spring.webflow.plugin.EncryptedTranscoder]: Constructor threw 
exception; nested exception is java.lang.SecurityException: class 
"org.bouncycastle.util.Arrays"'s signer information does not match signer 
information of other classes in the same package

          at 
org.springframework.beans.BeanUtils.instantiateClass(BeanUtils.java:163)

          at 
org.springframework.beans.factory.support.SimpleInstantiationStrategy.instantiate(SimpleInstantiationStrategy.java:89)

          at 
org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.instantiateBean(AbstractAutowireCapableBeanFactory.java:1088)

          ... 74 more

Caused by: java.lang.SecurityException: class 
"org.bouncycastle.util.Arrays"'s signer information does not match signer 
information of other classes in the same package

          at java.lang.ClassLoader.checkCerts(ClassLoader.java:943)

          at java.lang.ClassLoader.preDefineClass(ClassLoader.java:657)

          at java.lang.ClassLoader.defineClass(ClassLoader.java:785)

          at 
java.security.SecureClassLoader.defineClass(SecureClassLoader.java:142)

          at 
org.apache.catalina.loader.WebappClassLoader.findClassInternal(WebappClassLoader.java:2904)

          at 
org.apache.catalina.loader.WebappClassLoader.findClass(WebappClassLoader.java:1173)

          at 
org.apache.catalina.loader.WebappClassLoader.loadClass(WebappClassLoader.java:1681)

          at 
org.apache.catalina.loader.WebappClassLoader.loadClass(WebappClassLoader.java:1559)

          at org.bouncycastle.crypto.prng.drbg.HashSP800DRBG.<init>(Unknown 
Source)

          at org.cryptacular.util.NonceUtil.newRBG(NonceUtil.java:168)

          at org.cryptacular.util.NonceUtil.newRBG(NonceUtil.java:153)

          at 
org.cryptacular.generator.sp80038a.RBGNonce.<init>(RBGNonce.java:49)

          at 
org.cryptacular.generator.sp80038a.RBGNonce.<init>(RBGNonce.java:34)



Any clue? Is there some configuration to add?



Thanks.

Best regards,







Jérôme LELEU

Founder of CAS in the cloud: www.casinthecloud.com | Twitter: @leleuj

Chairman of CAS: www.jasig.org/cas | Creator of pac4j: www.pac4j.org




-- 
You are currently subscribed to cas-dev@lists.jasig.org as: 
mmoay...@unicon.net
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-dev

-- 
You are currently subscribed to cas-dev@lists.jasig.org as: 
arch...@mail-archive.com
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-dev

Reply via email to