Ronald,

On 5/25/21 09:31, Roskens, Ronald wrote:

-----Original Message-----
From: Christopher Schultz <ch...@christopherschultz.net>
Sent: Monday, May 24, 2021 1:56 PM
To: users@tomcat.apache.org
Subject: [EXTERNAL] Re: Tomcat SSL stops working after an undetermined
amount of time

CAUTION: This email originated from outside of the organization. DO NOT
CLICK on links or open attachments unless you recognize the sender and
know the content is safe.

Ezsra,

On 5/24/21 10:30, Ezsra McDonald wrote:
I am enabling SSL debugging this morning. I did catch this in the log
for an instance that started erroring out this morning. Seems like it
may be too generic to help solve my problem. Here it is:

24-May-2021 09:25:44.609 SEVERE [catalina-exec-51]
org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun
java.lang.NullPointerException
at org.bouncycastle.crypto.signers.PSSSigner.generateSignature(Unknown
Source)
at org.bouncycastle.jce.provider.JDKPSSSigner.engineSign(Unknown
Source)

Oh. You are using BouncyCastle. I've never tried to do that. I'm not
sure how well BC will work with Tomcat. We don't officially support that
configuration, but that doesn't mean we won't try to help.

This isn't a Tomcat issue but an interoperability issue between BouncyCastle & 
OpenJDK.

* https://github.com/bcgit/bc-java/issues/633
* https://bugs.openjdk.java.net/browse/JDK-8216039

Oh, great. Looks like a BC upgrade will fix the NPE. But possibly something downstream will still fail...

-chris

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Reply via email to