On 06/08/2021 06:15, Christopher Schultz wrote:
On 8/5/21 18:33, James H. H. Lampert wrote:
<snip/>
java.lang.SecurityException: org.xml.sax.SAXNotRecognizedException:
Feature: http://apache.org/xml/features/allow-java-encodings
org.apache.catalina.authenticator.jaspic.PersistentProviderRegistrations.loadProviders(PersistentProviderRegistrations.java:65)
org.apache.catalina.authenticator.jaspic.AuthConfigFactoryImpl.loadPersistentRegistrations(AuthConfigFactoryImpl.java:345)
org.apache.catalina.authenticator.jaspic.AuthConfigFactoryImpl.<init>(AuthConfigFactoryImpl.java:68)
sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native
Method)
sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:83)
sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:57)
java.lang.reflect.Constructor.newInstance(Constructor.java:437)
javax.security.auth.message.config.AuthConfigFactory$1.run(AuthConfigFactory.java:76)
javax.security.auth.message.config.AuthConfigFactory$1.run(AuthConfigFactory.java:67)
java.security.AccessController.doPrivileged(AccessController.java:696)
javax.security.auth.message.config.AuthConfigFactory.getFactory(AuthConfigFactory.java:66)
<snip/>
Now THAT looks like a bug. Here is the code around that setFeature() call:
Digester digester = new Digester();
try {
digester.setFeature("http://apache.org/xml/features/allow-java-encodings";,
true);
digester.setValidating(true);
digester.setNamespaceAware(true);
} catch (Exception e) {
throw new SecurityException(e);
}
That digester.setFeature() call should be in its own try/catch block
which issues a warning if a SAXException is thrown.
+1
And to reiterate, the very same JVM has no difficulty at all running
Tomcat 7.0.93.
Something seems odd about that. There must be soe configuration
difference between your 7.0.x environment and the 8.5.x environment you
are testing.
Tomcat 7 doesn't have JASPIC support so you'll never see this issue in
Tomcat 7.
Mark
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org
