Am 12.05.2022 um 22:57 schrieb Rémy Maucherat:
On Thu, May 12, 2022 at 9:14 PM Rainer Jung <rainer.j...@kippdata.de> wrote:

... for me with Java 1.8.0 332 (various OpenJDK builds) on TC 9.0.63 and
10.0.21, platform various Linuxes and also Solaris Sparc. It does not
fail for Java 11 and also not for Oracle Java 1.8.0 331.

The funny thing is it is the support that was already there in PEMFile
that is failing, and that code is apparently completely unchanged.

So I don't quite understand or maybe it simply never worked (I don't
know the reason why obviously) as the test was not there before.

That's likely. I didn't yet have the opportunity to run the test with older versions, but like you I don't see an obvious reason, why the problem should be new.

Best regards,

Rainer

Rémy

Testsuite: org.apache.tomcat.util.net.jsse.TestPEMFile
Tests run: 5, Failures: 0, Errors: 1, Skipped: 0, Time elapsed: 0.947 sec

Testcase: testKeyEncryptedPkcs1DesEde3Cbc took 0.59 sec
Testcase: testKeyEncryptedPkcs8 took 0.196 sec
          Caused an ERROR
Cannot retrieve the PKCS8EncodedKeySpec
java.security.spec.InvalidKeySpecException: Cannot retrieve the
PKCS8EncodedKeySpec
          at
javax.crypto.EncryptedPrivateKeyInfo.getKeySpec(EncryptedPrivateKeyInfo.java:258)
          at
org.apache.tomcat.util.net.jsse.PEMFile$Part.toPrivateKey(PEMFile.java:212)
          at org.apache.tomcat.util.net.jsse.PEMFile.<init>(PEMFile.java:143)
          at org.apache.tomcat.util.net.jsse.PEMFile.<init>(PEMFile.java:98)
          at
org.apache.tomcat.util.net.jsse.TestPEMFile.testKey(TestPEMFile.java:74)
          at
org.apache.tomcat.util.net.jsse.TestPEMFile.testKeyEncrypted(TestPEMFile.java:69)
          at
org.apache.tomcat.util.net.jsse.TestPEMFile.testKeyEncryptedPkcs8(TestPEMFile.java:64)
Caused by: javax.crypto.BadPaddingException: Given final block not
properly padded. Such issues can arise if a bad key is used during
decryption.
          at com.sun.crypto.provider.CipherCore.unpad(CipherCore.java:975)
          at
com.sun.crypto.provider.CipherCore.fillOutputBuffer(CipherCore.java:1056)
          at com.sun.crypto.provider.CipherCore.doFinal(CipherCore.java:853)
          at
com.sun.crypto.provider.PBES2Core.engineDoFinal(PBES2Core.java:323)
          at javax.crypto.Cipher.doFinal(Cipher.java:2168)
          at
javax.crypto.EncryptedPrivateKeyInfo.getKeySpec(EncryptedPrivateKeyInfo.java:253)

Testcase: testKeyPkcs1 took 0.004 sec
Testcase: testKeyEncryptedPkcs1Aes256 took 0.035 sec
Testcase: testKeyEncryptedPkcs1DesCbc took 0.023 sec

Best regards,

Rainer

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Reply via email to