On reading more in the release notes
(http://tomcat.apache.org/tomcat-5.5-doc/RELEASE-NOTES.txt), I figured
I'd give the shared/lib idea a try. I found that just by moving the
BouncyCastle JCE jar into shared/lib and out of the WEB-INF/lib of the
various webapps, all seems to work okay.
Note
Thought I'd post this one more time since doing so over the U.S. holiday
weekend likely left a lot of folks out of the loop... I'm either left
with running my webapps without a security manager, or staying on an
older Tomcat that has other bugs that I need resolved by 5.5.17
(clearing of liste