IdP 3.3.1 - mac check in GCM failed

[Cantor, Scott]

On 6/13/17, 10:58 AM, "users on behalf of George Stoynev" <users-bounces at shibboleth.net on behalf of george.stoynev at mcgill.ca> wrote:

> Comparing the logs from version 3.2.1 (since this is the common version 
> on all 4 servers) - the error messages are present in RHEL7, Java 8 
> servers but not in the RHEL6, Java 7 ones.

Well, I would never mix versions for any length of time, but the algorithm here isn't actually JDK code, it's Bouncy Castle. GCM wasn't in Java 7, so that among other reasons is why I used the BC APIs directly.

Unfortunately for your theory, I use CentOS 7 and Oracle Java 8 myself, no error of this sort. But that certainly points to a problem on those servers.

> Any clue of what else to look at?

None.

Maybe there's a conflicting Bouncy Castle jar somewhere getting pulled in by some extension?

Really no idea. Nobody has reported anything like it and I've been using that code since I went live, have had no problems with it.

-- Scott