- ASYM_ENCRYPT checks in init() if the secret key enables encoding (h…

…ttps://issues.redhat.com/browse/JGRP-2735)
belaban · Oct 12, 2023 · 60deb37 · 60deb37
1 parent dfc9012
commit 60deb37
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/src/org/jgroups/protocols/ASYM_ENCRYPT.java b/src/org/jgroups/protocols/ASYM_ENCRYPT.java
@@ -102,6 +102,11 @@ public boolean isKeyServer() {
     }
 
     public void init() throws Exception {
+        SecretKey k=createSecretKey();
+        byte[] encoded=k.getEncoded();
+        if(encoded == null)
+            throw new IllegalArgumentException(String.format("secret key %s/%s does not support encoding (FIPS enabled?)",
+                                                             k.getAlgorithm(), k.getFormat()));
         send_group_keys=false;
         initKeyPair();
         super.init();