Skip to main content
Participant
March 30, 2009
Question

CF8 with ESS

  • March 30, 2009
  • 2 replies
  • 1090 views
Hi..We have a serach page in our coldfusion application which is implemented in java and it interacts with the verity (Third party) search engine through ESS web service.Recently upgraded the CF server from Mx 6 to MX 8.• The search functionality fails to work after MX 8 migration. Receiving the below error. Can anyone please help me?

Exception in Search Servlet Error invoking operation:
java.lang.SecurityException: Seed must be between 20 and 64 bytes. Only 8 bytes supplied.


javax.servlet.ServletException: Exception in Search Servlet Error invoking operation:
java.lang.SecurityException: Seed must be between 20 and 64 bytes. Only 8 bytes supplied.
at cat.search.servlet.SearchServlet.doPost(SearchServlet.java:152)
at cat.search.servlet.SearchServlet.doGet(SearchServlet.java:42)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:740)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
at jrun.servlet.ServletInvoker.invoke(ServletInvoker.java:106)
at jrun.servlet.JRunInvokerChain.invokeNext(JRunInvokerChain.java:42)
at jrun.servlet.JRunRequestDispatcher.invoke(JRunRequestDispatcher.java:286)
at jrun.servlet.ServletEngineService.dispatch(ServletEngineService.java:543)
at jrun.servlet.jrpp.JRunProxyService.invokeRunnable(JRunProxyService.java:203)
at jrunx.scheduler.ThreadPool$DownstreamMetrics.invokeRunnable(ThreadPool.java:320)
at jrunx.scheduler.ThreadPool$ThreadThrottle.invokeRunnable(ThreadPool.java:428)
at jrunx.scheduler.ThreadPool$UpstreamMetrics.invokeRunnable(ThreadPool.java:266)
at jrunx.scheduler.WorkerThread.run(WorkerThread.java:66)

Thanks in advance...

This topic has been closed for replies.

2 replies

Participant
May 6, 2009

This is certainly not a 'fix', but I thought it might serve as additional info.  I don't believe the error is necessarily related to the OP's code, but perhaps in the way that ColdFusion works with the crypto libraries under the covers.   I am running into a similar issue creating a SonicMQ event gateway listener.  When starting the service, the gateway fails with:

____________________________________________________

javax.naming.NamingException [Root exception is java.lang.SecurityException: Seed must be between 20 and 64 bytes. Only 8 bytes supplied.]
    at com.sonicsw.jndi.mfcontext.MFConnectionManager.connect(Unknown Source)
    at com.sonicsw.jndi.mfcontext.MFConnectionManager.<init>(Unknown Source)
    at com.sonicsw.jndi.mfcontext.MFConnectionManager.getManager(Unknown Source)
    at com.sonicsw.jndi.mfcontext.MFContext.<init>(Unknown Source)
    at com.sonicsw.jndi.mfcontext.MFContextFactory.getInitialContext(Unknown Source)
    at javax.naming.spi.NamingManager.getInitialContext(NamingManager.java:667)
    at javax.naming.InitialContext.getDefaultInitCtx(InitialContext.java:288)
    at javax.naming.InitialContext.init(InitialContext.java:223)
    at javax.naming.InitialContext.<init>(InitialContext.java:197)
    at examples.JMS.JMSConsumer.start(Unknown Source)
    at examples.JMS.JMSGateway.startGateway(Unknown Source)
    at coldfusion.eventgateway.GenericGateway.start(GenericGateway.java:118)
    at coldfusion.eventgateway.EventServiceImpl$GatewayStarter.run(EventServiceImpl.java:1428)
Caused by: java.lang.SecurityException: Seed must be between 20 and 64 bytes. Only 8 bytes supplied.
    at com.rsa.jsafe.crypto.au.a(Unknown Source)
    at com.rsa.jsafe.provider.JSA_FIPS186PRNGXChangeNoticeGeneral.engineNextBytes(Unknown Source)
    at java.security.SecureRandom.nextBytes(SecureRandom.java:433)
    at java.security.SecureRandom.next(SecureRandom.java:455)
    at java.util.Random.nextInt(Random.java:189)
    at progress.message.zclient.Connection.<init>(Connection.java:575)
    at progress.message.jimpl.ZConnectionFactory.createZConnection(ZConnectionFactory.java:133)
    at progress.message.jimpl.Connection.<init>(Connection.java:428)
    at progress.message.jimpl.TopicConnection.<init>(TopicConnection.java:85)
    at progress.message.jclient.TopicConnectionFactory.createTopicConnection(TopicConnectionFactory.java:227)
    at progress.message.jclient.TopicConnectionFactory.createTopicConnection(TopicConnectionFactory.java:204)
    at com.sonicsw.mf.comm.jms.DurableConnector.initialConnect(Unknown Source)
    at com.sonicsw.mf.comm.jms.DurableConnector.<init>(Unknown Source)
    at com.sonicsw.mf.comm.jms.ConnectorClient.connect(Unknown Source)

Participant
May 8, 2009

I have solved this problem in my scenario.  Apparently when Adobe released CF8 with JDK 1.6, they have added FIPS security, which disables the JCE.  To correct this issue, adde the following to java.args in your jvm.config file, then restart your server.

-Dcoldfusion.disablejsafe=true

Inspiring
March 30, 2009
> Seed must be between 20 and 64 bytes. Only 8
bytes supplied.

how are you generating the seed? post relevant code - it always helps.

Azadi Saryev
Sabai-dee.com
http://www.sabai-dee.com/
Participant
March 30, 2009
I am not using seed anywhere in the code...I do not have clear idea about what is seed or why it is used..
We are accessing the ESS service through java-servlet and the coldfusion page calls that java-servlet...do i have to paste the java-servlet code here?

Please help me..