<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
Thank you Scott!<br>
<br>
Please let me know if I should submit any report or if there is
another way to help with this.<br>
<br>
All the best,<br>
<pre class="moz-signature" cols="72">George
</pre>
<div class="moz-cite-prefix">On 2017-06-13 12:00 PM,
<a class="moz-txt-link-abbreviated" href="mailto:users-request@shibboleth.net">users-request@shibboleth.net</a> wrote:<br>
</div>
<br>
<pre wrap="">Message: 3
Date: Tue, 13 Jun 2017 15:19:05 +0000
From: "Cantor, Scott" <a class="moz-txt-link-rfc2396E" href="mailto:cantor.2@osu.edu"><cantor.2@osu.edu></a>
To: Shib Users <a class="moz-txt-link-rfc2396E" href="mailto:users@shibboleth.net"><users@shibboleth.net></a>
Subject: Re: IdP 3.3.1 - mac check in GCM failed
Message-ID: <a class="moz-txt-link-rfc2396E" href="mailto:49C9360C-FDF6-41C1-9F63-269B321BA79B@osu.edu"><49C9360C-FDF6-41C1-9F63-269B321BA79B@osu.edu></a>
Content-Type: text/plain; charset="utf-8"
On 6/13/17, 10:58 AM, "users on behalf of George Stoynev" <a class="moz-txt-link-rfc2396E" href="mailto:users-bounces@shibboleth.netonbehalfofgeorge.stoynev@mcgill.ca"><users-bounces@shibboleth.net on behalf of george.stoynev@mcgill.ca></a> wrote:
</pre>
<blockquote type="cite" style="color: #000000;">
<pre wrap="">Comparing the logs from version 3.2.1 (since this is the common version
on all 4 servers) - the error messages are present in RHEL7, Java 8
servers but not in the RHEL6, Java 7 ones.
</pre>
</blockquote>
<pre wrap="">Well, I would never mix versions for any length of time, but the algorithm here isn't actually JDK code, it's Bouncy Castle. GCM wasn't in Java 7, so that among other reasons is why I used the BC APIs directly.
Unfortunately for your theory, I use CentOS 7 and Oracle Java 8 myself, no error of this sort. But that certainly points to a problem on those servers.
</pre>
<blockquote type="cite" style="color: #000000;">
<pre wrap="">Any clue of what else to look at?
</pre>
</blockquote>
<pre wrap="">None.
Maybe there's a conflicting Bouncy Castle jar somewhere getting pulled in by some extension?
Really no idea. Nobody has reported anything like it and I've been using that code since I went live, have had no problems with it.
-- Scott</pre>
</body>
</html>