https://bz.apache.org/bugzilla/show_bug.cgi?id=65767
--- Comment #2 from Christopher Schultz <ch...@christopherschultz.net> --- This is actually a bug in the JRE itself and not Tomcat, but it's something that we can probably work around. The definition of this thing is here: https://datatracker.ietf.org/doc/html/rfc2898#appendix-A.2 Once the KDF OID, salt, iteration count, cipher OID, initialization vector, and encrypted key are unpacked from the ASN.1 structure, you just have to re-assemble them into the objects provided by the JRE. I see you have PR. I'll have a look at it. -- You are receiving this mail because: You are the assignee for the bug. --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org