Hi Chris! Because the argument svc is basically passed the value of SND_RX_SEQ (1) | Channel.SND_TX_SEQ (2) | MBR_RX_SEQ (4) | MBR_TX_SEQ (8), so you need to fix the following in start method. == if(Channel.SND_TX_SEQ == svc) -> if (Channel.SND_TX_SEQ == (svc & Channel.SND_TX_SEQ)) ==
In order to avoid warnings, you need to add and implement EncryptInterceptorMBean. Some components (static membership etc.) send channel message at startup, so you should call "super.start(svc)" after calling "initCiphers()". After the above fix, I configured this interceptor and tested session replication. It seems to work fine. 2018年10月26日(金) 1:08 Christopher Schultz <ch...@christopherschultz.net>: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA256 > > Rémy, > > On 10/25/18 11:54, Rémy Maucherat wrote: > > On Thu, Oct 25, 2018 at 5:15 PM Christopher Schultz < > > ch...@christopherschultz.net> wrote: > > > >> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 > >> > >> All, > >> > >> Bump. > >> > >> I have a full patch at this point (still without documentation), > >> but this one includes resolution of the IV issue and also a set > >> of unit tests which pass. > >> > >> I'd appreciate it if someone could install this into their > >> cluster and see if it works. Just configure the interceptor into > >> your interceptor chain and set an encryption key (e.g. > >> "cafebabecafebabe"). > > > > > > IMO you should commit it and people will test it then (you did and > > it works for you, right ?). With my storeconfig hat on, the > > encryptionKey should be more bean like, the poor thing will break > > otherwise (again ;) ). > > Okay, I can make the encryption key extractable. > > I don't actually have a cluster available to test.... I've never > gotten one set up and working. I will do that, but it may take some time > . > > The unit tests actually send the data through the > sendMessage/messageReceived methods, so I'm fairly confident it will wor > k. > > I'll write-up the documentation and commit it, then. > > Thanks, > - -chris > -----BEGIN PGP SIGNATURE----- > Comment: Using GnuPG with Thunderbird - https://www.enigmail.net/ > > iQIzBAEBCAAdFiEEMmKgYcQvxMe7tcJcHPApP6U8pFgFAlvR6oQACgkQHPApP6U8 > pFhKIBAAv2NovLqQpgIsuJzd17LfyHP0wKO0HBaXO9EINx3SfhoTTN7oN5pl7F5I > v+kgBBYVzYGa9N0sVpUhmdP2MqWZ/G0ocY4/WqBCsDaxNcRrUQfY3HMxw18vAQng > sb8bXNVxK4TboKO8lvzPlGVFTuiUxynu5rN/1J62B9scjQE2aDzjIeQ3hAj68V+V > NuKWemxQ/zLLJewEUJ2YMRDntZdn8FoGhpXtnueYNJAaeG3xAzBH3xMwBJQRXpoS > Q54CcumZ07+X5cK7y0as3yLayrQmMnyNpAxILAsiLpCuG24YXDpncwP6izkgkaKq > MogRGxUjuBluXbCKcu+4bQ4nVmsIH9qM0ILcih8Ek/sFqhKBvzlK4TPlqKP/LS51 > +QcSopxX4okJEN8T3VLHyWb7Iw20XjjmjDfJewTZQaHdl1ay20SXsWaFmBXhczX0 > I/YDpqdXr+ZIk7CFUbi0BHcJ6LNxJHakddARds+qDajtUlDYB9GVGersyCr5aDcp > N9887JvRBWC3qODyN8W2CLzdMdTsmdIBYdkRNs3obhPzGetr41TDN0JafEaVw+9W > m3jvzGABOrZGIGF3JFYsqYAG27fRlsR/FU+nu94chKYTOb7QrhOop9lj6NLJl4pU > Ny+3vncMdkUJmcRikGf+ukXFBpZ+ISg+XqHCWBfUnN7ClCnnLmw= > =3pk7 > -----END PGP SIGNATURE----- > > --------------------------------------------------------------------- > To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org > For additional commands, e-mail: dev-h...@tomcat.apache.org > > -- > Keiichi.Fujino > <dev-h...@tomcat.apache.org>
