-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Mark,
On 1/20/20 12:21 PM, Mark Thomas wrote: > On 20/01/2020 17:08, Christopher Schultz wrote: >> On 1/20/20 12:01 PM, ma...@apache.org wrote: > > <snip/> > >>> Add encryption as the first option to secure a cluster --- > > <snip/> > >> I could have sworn I added this, already. Thanks for doing it. > > I'm looking at back-porting the Interceptor to 7.0.x. I've got > everything done apart from GCMParameterSpec which is new in Java > 7. > > I don't suppose you've looked into this previously and know if > there is a Java 6 equivalent? It would save me the time to research > it. Hmm, I have not. One option would be to simply drop support for the GCM block-cipher mode. I believe both CFB and CTR modes are still supported, and are better choices than CBC. I'm not sure about OFB. > If not, I'll make it a Java 7+ feature with JreCompat. That's always an option. If we want to support GCM on Java 7 but not cause errors on Java 6, we could re-work the code a little bit to only attempt to load the GCMParameterSpec class if GCM mode is specifically requested. - -chris -----BEGIN PGP SIGNATURE----- Comment: Using GnuPG with Thunderbird - https://www.enigmail.net/ iQIzBAEBCAAdFiEEMmKgYcQvxMe7tcJcHPApP6U8pFgFAl4nHeoACgkQHPApP6U8 pFgEkw/7BB7dz13sh50+LNknutGBrygsmomDSzY807qgO4ypuUQPnuANP3qTbZw9 E2j51ivoWPf8+NV6BP3zOcVCtPTZ/KSNfLHFYMmbfHt2PV2WER5Rcbmy8H55Nlu3 gjdyFcs3iKsLs+5gEi+TzQ7qMLHfX5gNQCdLyLvtQAVHQCEBy5AFowNseHcYiF3n rjF93Enc3RGNa1pAwLEiYwxW+rZ9OkSqVvDyG/cz2MVEk9heudkTcKEhwOwdubdx 0VXuhIrlh9VkukwctgXZnE4KVYwcjvrrCfamB90wJof1sOCb3gJdoI5d1z/TR/sq JZGNzga3ShzGaPM+SvhuwLorRVor9KXuRrgP2QyrNwRsH0LR9PmW9HPFVdLTEGbL XdUktXFn9TXnNzq4ZpKVAWoKAM7oEDUlX2MD0W4hZgM+zM0aJdOVy+Xxh58lch2h uEn55gaZSHaK1OryJUr2v+5A6TmgF/zT+JLT8to5wvO7Mi9DM4ExxJEeGPMqeEX/ VrWcJ5LYh4b6qdizA9s88Sai3qWci8+6PZX+0qQr0JWjvDJzrSgApZ7Sb5a23hHT zlDDe6uUS1OVtHMgStaGTgZhDtz0fiTMLfew4TFFrfP0MUsmg3208oSxG+FxrTcY g8MaZQEiwmxjK9ItGjnV5G+pqBLMvvuhScDxT0QDyBT/LpjkwxY= =Qhpj -----END PGP SIGNATURE----- --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
