Uploaded image for project: 'Java Driver'
  1. Java Driver
  2. JAVA-2740

Work around JDK bug that can cause SCRAM-SHA-1 authentication to intermittently fail

XMLWordPrintableJSON

    • Type: Icon: Improvement Improvement
    • Resolution: Fixed
    • Priority: Icon: Minor - P4 Minor - P4
    • 3.6.2
    • Affects Version/s: None
    • Component/s: Authentication
    • None

      A JVM bug, originally reported in https://stackoverflow.com/questions/46971788/java-cipher-pbe-thread-safety-issue, can cause SCRAM-SHA-1 authentication to intermittently fail.

      Synchronizing access to the java.security.Key instance used in com.mongodb.connection.ScramSha1Authenticator.ScramSha1SaslClient#hi has been demonstrated to be an effective workaround to the bug, as suggested in JDK-8055183

      JDK bug links:

            Assignee:
            jeff.yemin@mongodb.com Jeffrey Yemin
            Reporter:
            jeff.yemin@mongodb.com Jeffrey Yemin
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: