Skip to content

Use a properly random source to generate digest client nonces - #3423

Merged
coheigea merged 1 commit into
mainfrom
coheigea/digestauth
Sep 1, 2026
Merged

Use a properly random source to generate digest client nonces#3423
coheigea merged 1 commit into
mainfrom
coheigea/digestauth

Conversation

@coheigea

Copy link
Copy Markdown
Contributor

No description provided.

@coheigea
coheigea merged commit b019644 into main Sep 1, 2026
5 checks passed
@coheigea
coheigea deleted the coheigea/digestauth branch September 1, 2026 07:27
coheigea added a commit that referenced this pull request Sep 1, 2026
coheigea added a commit that referenced this pull request Sep 1, 2026
@ppalaga

ppalaga commented Sep 8, 2026

Copy link
Copy Markdown
Contributor

Hi @coheigea, this is a bit problematic for Quarkus CXF in native mode, because we let GraalVM initialize as many classes as possible at build time for fast application boot. Doing this for a class wanting to init java.util.Random (or its subclasses) at build time is not a good idea for obvious reasons. Could I please send a change similar to https://github.com/apache/cxf/pull/2706/changes ?

ppalaga added a commit to ppalaga/cxf that referenced this pull request Sep 8, 2026
nonces

Avoid static initialization of Random/SecureRandom to allow build time
class initialization with GraalVM native image
@ppalaga

ppalaga commented Sep 8, 2026

Copy link
Copy Markdown
Contributor

@coheigea I dared to send #3452 and #3451

coheigea pushed a commit that referenced this pull request Sep 8, 2026
…3451)

nonces

Avoid static initialization of Random/SecureRandom to allow build time
class initialization with GraalVM native image
coheigea pushed a commit that referenced this pull request Sep 8, 2026
…3452)

nonces

Avoid static initialization of Random/SecureRandom to allow build time
class initialization with GraalVM native image
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants